{"report_id":"0acd5fe8-12b5-49f7-bbfc-5b0913c75a8c","version":0,"status":"done","tags":[],"date":"2026-08-27T14:03:12Z","url":{"schema":"https","addr":"wap.ax-binance.com/","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":0,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"wap.ax-binance.com/","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"title":"币安网官网入口 - APP全功能支持 - 数字货币最新消息币安合约交易","dom":{"size":35850,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (405)","md5":"8632e7dd8221dabd5a15cffa638800b9","sha1":"3c2e1dc84636dc0efccbfc0d35537bc0b7bd3aae","sha256":"f2cca88ab85380af2d9d0aaf97a00fcdeb272477dc30b80a895a97eb6575b2d6","sha512":"1c5f85428eed2749974a2569750e47fe90c869014d97092e8c5efaba39d734c970f7ee26128a1a3aba8665fa972eeebe76a45f867a6c4d55376537b7670f7e1a","ssdeep":"768:NucvtAMXoxV5cV7EnxZrCsuoVHsXJVhlKg/btyZaZ2ZdOxnLnW/n+JntnukJf:NuPt5IExoboVMXJVhlKg/bwZaZ2ZdOhl","tlshash":"ebf2933500fe48370193a1c17af12b1e6ad6da3bdb674945b2fe8ac94fd6d90ce07609","dom_hash":"domhash9d3b45f6c95b0c6293d4702232937360","first_seen":"2026-08-27T14:02:30.806742Z","last_seen":"2026-08-27T14:03:18.346485Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wap.ax-binance.com/","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":0,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-01T14:03:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wap.ax-binance.com","ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-21T23:32:39.404142Z","last_seen":"2026-08-27T14:02:25.42133Z","alert_count":144,"request_count":48,"received_data":14481777,"sent_data":61247,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-08-25T18:24:18.027298Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":460,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wap.ax-binance.com/","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"da343474f786567339d6555bb66dfd25","sha1":"374f8ad71a9f0c3eb0e41040279f8a62783b1c47","sha256":"ee47f75bcc609d72881c37f8a9dd0c5a0069cdd6e3673cb60b9b22123b26138f","sha512":"ba7e6bd45b38df57e6937d1e3dc751fefd155c920d7635e257066f94bcb025ebd842dfa75619397a4585a6e9c7d480ed005785c42722c082f2f2bb2a5beb69c7","ssdeep":"","tlshash":"5ac08c37112138300a4ee527900eea8128b950012a0298020829841b9ce8e8cd1bb8e8","size":148,"data":"","first_seen":"2026-06-25T21:56:53.668895Z","last_seen":"2026-08-27T14:04:39.842377Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b55f6bdb428fb4499c517351b4fd36c","sha1":"b10984bcd2d24bcc10415a7f1ef6688b235db339","sha256":"67c3eab525435f81d2ecb49f66018e3786f3e063e3e9ad4befef551f39ba6fc5","sha512":"66761a2eccb82eacce750c20227bace8079d0d9726f26a8dfca7372ba98c2361376a7f7b87600f66983fa08d892d6bcf4d327b1108e671911480fa8b950e74f3","ssdeep":"","tlshash":"8c900200f68a04a9430629002933814300d1a840839641a4a44c404b0240640f027d41","size":54,"data":"","first_seen":"2026-06-20T21:36:56.194699Z","last_seen":"2026-08-27T14:05:38.836542Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/js/master.js","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf76de23f7e37177487681c9ce0a605c","sha1":"b3237e5e4b6663dac529f6354614551719a7ca70","sha256":"b597bc7624adec0a3ca68a3403bfd60c581a828409457a9d952fe0294308910d","sha512":"ad377d50823f0e3cb680d808d74856ad6aa78d90c2dbac145ea28bdd93e966de2d9ab848de8e36e608bc2425958b2bae4db3730445ee0e62db4770074c9d1aa7","ssdeep":"","tlshash":"7721ac25447a547580fba6d6938f33e9b2240043a9098c023e9c4ec9afd59f25ef08e3","size":1325,"data":"","first_seen":"2025-06-13T16:12:07.01892Z","last_seen":"2026-08-27T14:04:39.805595Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/js/pv_common.js","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"18469a3d9e6a10bf606cccdc0867c15f","sha1":"6acdb5b0a0eaa922897f246015a0adaf19ec1f4a","sha256":"70cf49341fdbd69494ad8bb00f1bca86097d8dd1ebcee1c55c507d56f6ad24b3","sha512":"1343b7d57b2a220e3d1e64dc2dd74a721dcaff2d9c377698622e1b706f55307781b6f3e9bceb3b9369c434faf2d55b4dffc6c30be68380ba2f25421e2fe0fd9c","ssdeep":"","tlshash":"7a213d4ae8f724936b53b078068b501931371a2b885ddd183f4d83d94f6c53dd5a56dc","size":1345,"data":"","first_seen":"2025-11-01T10:11:19.920889Z","last_seen":"2026-08-27T14:05:38.823414Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/js/jquery.min.js","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-27T17:31:59.344837Z","times_seen":500642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/tj/and.js","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aef0d0f01abc5b8456298caf5a753e9","sha1":"9d33160c698070017f053272d295707e3689b6b4","sha256":"0b135bffaa0e2b41d0cad3d0ee6a15915f2aa4f1e7f02c7cdf7480e7c91756a2","sha512":"14aac68ee0ce2106b23ad0d9f1c55f2f41d912f561ce3418d35be93c3f162de8019177159b2f571b5c079f75387c153446883e9c6cd9a675e03aab2cebdc4287","ssdeep":"","tlshash":"16f0ac1e7896143413b6087a23bbda4d3463260ed4adce0296dec5e15b74eea080a68c","size":586,"data":"","first_seen":"2025-10-14T16:42:36.073256Z","last_seen":"2026-08-27T14:04:39.833257Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/js/jquery.min.js","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.070Z","timestamp":1787839355070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/js/jquery.min.js HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-15d9d\"\r\nexpires: Fri, 28 Aug 2026 02:02:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89501,"size_decoded":31669,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-27T17:31:59.344837Z","times_seen":500642,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/js/master.js","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.083Z","timestamp":1787839355083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/js/master.js HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-52d\"\r\nexpires: Fri, 28 Aug 2026 02:02:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1325,"size_decoded":1140,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"bf76de23f7e37177487681c9ce0a605c","sha1":"b3237e5e4b6663dac529f6354614551719a7ca70","sha256":"b597bc7624adec0a3ca68a3403bfd60c581a828409457a9d952fe0294308910d","sha512":"ad377d50823f0e3cb680d808d74856ad6aa78d90c2dbac145ea28bdd93e966de2d9ab848de8e36e608bc2425958b2bae4db3730445ee0e62db4770074c9d1aa7","ssdeep":"","tlshash":"7721ac25447a547580fba6d6938f33e9b2240043a9098c023e9c4ec9afd59f25ef08e3","first_seen":"2025-06-13T16:12:07.01892Z","last_seen":"2026-08-27T14:04:39.805595Z","times_seen":172,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/DfIZdPoV.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.302Z","timestamp":1787839355302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/DfIZdPoV.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-4888b\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297099,"size_decoded":297533,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"df92c3df3754673f94e4bec0e2f5eef8","sha1":"6638671ca29184ea38988be852a418e898983ffe","sha256":"46923b4993da0e6160bc19b9d532eae85fff48542fdc4ffa15afc9a9f4a7c164","sha512":"f5ecb1920d00af08ce6150edcb28a83979069bc8232725cbda1c696b509e2d914affae036514a7ada99d8b4d0812bb48f082aa35fcbc9c39e408b82dd6cb72b1","ssdeep":"6144:CsAJ6yN33iL0/AkgwKK2JGJ5RjJBmSl2JQJchJZqBevBTMQ:A33iL0OwUIxJsSl2yIvBoQ","tlshash":"2e5423ffe661980c783458f4803a260f2421093f9272a37f2bd57f25a57ac15672dea7","first_seen":"2025-09-02T04:51:20.952768Z","last_seen":"2026-08-27T14:03:18.348626Z","times_seen":3,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/DOGE.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.319Z","timestamp":1787839355319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/DOGE.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-109b\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4251,"size_decoded":4794,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ae64499c8825452f6262177ee6dd525b","sha1":"92a35e0817cefb5befbb18422fb4c9d220f6754c","sha256":"47fb417f6b72c4edc08dfb90a376b2c88b3b51992bf3c83dd14e011edba2f339","sha512":"1a776374f3c20d16bf0c84dbb28a6ca3d0a110ca928aa87f56d79d09b898091b84f4d3ea164a6c79db0c9fedeb66167bd83b854267c2870394f70dc536117441","ssdeep":"96:IqQDUBKTuBVrN2Dc4tR/HAwaHEIkVZdBrc2nPatF:IL4cTIB8c4n/HbIegdF","tlshash":"00918ede37594349986e152b32ca7f282c32b7db00753e35ad4946c327b4063e5d6714","first_seen":"2023-05-04T14:40:12Z","last_seen":"2026-08-27T14:21:41.326761Z","times_seen":15342,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/bitget.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.323Z","timestamp":1787839355323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/bitget.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 525\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\netag: \"69a68772-20d\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":525,"size_decoded":1033,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"f28f04520098a3b137e4a9819a63c193","sha1":"e1a14814c53de51553ad1bb77a596cf13ee918d5","sha256":"f49107be685dbc68e93acbcfecf26ac12418bbc5e954e93e8a7d84b6a9f18f4b","sha512":"d301ca4cbd4c5a74577e6f4a0950d60818e935b50261b2871a889c5ac5e7e954b8c94ad0e6bc370528bd1d9e8debd0508565b34c6d56369776494c1240324ae0","ssdeep":"","tlshash":"13f00581239ea24757764410573ff92c86f38eac5ca4007ed5015da141b67c9d8992bf","first_seen":"2024-12-08T21:22:12.532481Z","last_seen":"2026-08-27T14:04:39.814813Z","times_seen":180,"resource_available":false,"data":null}},"time_used":1326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":799,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/tj/and.js","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.071Z","timestamp":1787839355071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/tj/and.js HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 586\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-24a\"\r\nexpires: Fri, 28 Aug 2026 02:02:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":586,"size_decoded":1105,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3aef0d0f01abc5b8456298caf5a753e9","sha1":"9d33160c698070017f053272d295707e3689b6b4","sha256":"0b135bffaa0e2b41d0cad3d0ee6a15915f2aa4f1e7f02c7cdf7480e7c91756a2","sha512":"14aac68ee0ce2106b23ad0d9f1c55f2f41d912f561ce3418d35be93c3f162de8019177159b2f571b5c079f75387c153446883e9c6cd9a675e03aab2cebdc4287","ssdeep":"","tlshash":"16f0ac1e7896143413b6087a23bbda4d3463260ed4adce0296dec5e15b74eea080a68c","first_seen":"2025-10-14T16:42:36.073256Z","last_seen":"2026-08-27T14:04:39.833257Z","times_seen":30,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/logo_binance.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.288Z","timestamp":1787839355288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/logo_binance.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-d25\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3365,"size_decoded":3547,"mime_type":"image/png","magic":"PNG image data, 192 x 79, 8-bit colormap, non-interlaced","md5":"7cc8c90b3e2bc7bf79e17c7664dfb171","sha1":"a4992e50d85072e2fa00cb23821bfcf1d96de474","sha256":"652d5a85334cc23360c45469083e3f04028af526764c2f217536c25400a4b721","sha512":"94438a80149de3f5277c297640377971eec843f4ef909bb167f5a95c7d59f5db0e5b0c39a3d0c63103d082c7b3bc3bef627c1e073961d6e8d003a0735d6fc8af","ssdeep":"","tlshash":"3961d61292d2bd3b5de850dfd60f5911c31ac91d00f560891bb73d392ad4af97c3ca90","first_seen":"2025-06-16T06:13:20.559793Z","last_seen":"2026-08-27T14:05:38.798206Z","times_seen":82,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/G4XOMj5R.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.300Z","timestamp":1787839355300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/G4XOMj5R.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-41009\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266249,"size_decoded":265772,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"402fb6ff5a3350c9a35efa464123a872","sha1":"f1d45d612773c21d7c7831aa77cfdeb2b44f9ffe","sha256":"1009ac5f922f0a3cca573ce1b6cf046de776e934936d4677e4fd7a6b25af9489","sha512":"9ec368e3cfe5401f67ce726b716ed6260f65d553687b4bc0a2650a9c52b941c9f725413e2308f71e41ba882f6289332f4b410f2060c85c572b9395cdba03319c","ssdeep":"6144:8G1yb5z3wQ/No9t2tFf8wj/vvAhGDk8mioSelGBAeuE:I5zgcNc8thjHIhGDVoS/5","tlshash":"3744237be1f31baa4a2e2cf7de9413404d888c4d77dbbb89031646e64da2508bd4d553","first_seen":"2026-08-27T14:02:30.858925Z","last_seen":"2026-08-27T14:03:18.352405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/FLoDuorS.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.305Z","timestamp":1787839355305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/FLoDuorS.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-35dee9\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3530473,"size_decoded":3532088,"mime_type":"image/png","magic":"PNG image data, 2730 x 1535, 8-bit/color RGBA, non-interlaced","md5":"0bc256858124dbd30709668166323670","sha1":"32c314576c96f88ba180db059e51d5ebcf1f2349","sha256":"38d3b62118bd86903ebe431c7da4a6567154bb85271f2f39277497804929d055","sha512":"0f55d8e8b1b5ee3f574be561501555eb9fa898d8e79f4629dfe23177d7854b87fc187b9f5440f9a1c20b67e54dc9dd49ac60b888679a3542903fe366f5d9fbe8","ssdeep":"24576:8T1ooZnEEccvvYSRo3Alt3IYDkOwdMZXi6XwSmSDOG8tWPBVXT3KsOi:8TdZEC3YSRLTIYidMli6ASPDcWVT6K","tlshash":"ee2533b8405d6efc6023265b4c2e460e837c2a78de750a4649ffdcd5c62d2fa9cd9e18","first_seen":"2026-08-27T14:02:30.826148Z","last_seen":"2026-08-27T14:03:18.353056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/q53NLR1H.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.307Z","timestamp":1787839355307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/q53NLR1H.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-64edd\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413405,"size_decoded":414017,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"a576c3e291361d7b03197b3e5efd86e4","sha1":"0e5484456ba86ce51bf0c236fb3a3b7ffeb8465f","sha256":"0c0574f2e4dd4e4c902fb4b15b778edd3ba749af10bdf35ce13cb4108d8f5bb9","sha512":"83acf8d0e6e4f1f375de6c3ddc0bbae1e1d2e30d00b5a6276b2eb4a0d779882a9db14e72cd7c0eb576f217bc9359e951790690a07e6f0dd009c97dfd14ca2084","ssdeep":"12288:DaxPeNNgUFud1sfiTB5xVaIFbNwBExqvxZ0SSvI:+ZfUWCcbsE4vxZ4vI","tlshash":"6e94238cec2c44691758753e8422033494746e26f2336cabf47bfb7a68a31dbc5d5ac9","first_seen":"2026-06-24T11:41:37.852915Z","last_seen":"2026-08-27T14:03:18.353734Z","times_seen":3,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/USDT.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.314Z","timestamp":1787839355314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/USDT.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 674\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\netag: \"69a68772-2a2\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":1182,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"25a8a1e3479b793e8bcddc8b2ba726a9","sha1":"248492192bb393c84661daab721fcc5d0b82d165","sha256":"2d5a29e2c8a731b9c0891dfa54c3bf753ad5bba2911e71ebca654c273cf08748","sha512":"758bae768d116e95d923a254204ae52624a0bf3a4578fe62bc9039659c45655240b77e9bb92433669cc90f6de32c4df4e5bd83fc632f7c71a85a285446272159","ssdeep":"","tlshash":"dd014e4a0e257a702f230e7325bf2d4f102964e012b55986604eb1338e1eaed142062a","first_seen":"2023-08-15T00:41:50Z","last_seen":"2026-08-27T14:21:41.284541Z","times_seen":2140,"resource_available":false,"data":null}},"time_used":1334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":799,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/SOL.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.317Z","timestamp":1787839355317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/SOL.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-eaf\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3759,"size_decoded":4301,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8634cee42b68c501da8d76beee00bf86","sha1":"346a50344174ec7c53cdd48080a55f7cd3a7c164","sha256":"890b9f9ed3f5ab8390b86f93b5b8ba0c2d5d50a5dc21668734b3537bc3a65f53","sha512":"405e62a3f1c24476041f90ddb5e50801693578a1b3e108919edcde05bb429bad77fc60b0096adbaa9a2704835ebd7dc165720ad0a14ada9498b3234d361ef259","ssdeep":"","tlshash":"fa715be58e8349f8b5ce461d652892f55cc24943d9f987101ee467921800a82f0a90e2","first_seen":"2024-01-31T18:12:49Z","last_seen":"2026-08-27T14:21:41.249038Z","times_seen":3525,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/ADA.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.321Z","timestamp":1787839355321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/ADA.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-ae6\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2790,"size_decoded":3332,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2b4047ef139810f5403fe2987bd2dc9e","sha1":"529276c43a521743eb53df1cfe8bc8ffff220dfa","sha256":"38c163ecba73c000df0abfe2ad5c4f941164909f8078e8a304dba4db696bc709","sha512":"d1e527d489bc5db742681f87a0eff100b8126baee0b9765e5bccd9360a917ed4ee870abd79e417693e36e600d4cbadc11e30cb73a630c3ce11a51be4a2dc86c8","ssdeep":"","tlshash":"27514a428049d490ffa2e705d715816ac940f88cfce6a3858ec4d52a60be3a494b77c0","first_seen":"2023-05-06T05:54:57Z","last_seen":"2026-08-27T14:04:39.814291Z","times_seen":13244,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/css/index.css","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.065Z","timestamp":1787839355065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/css/index.css HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-33a9\"\r\nexpires: Fri, 28 Aug 2026 02:02:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13225,"size_decoded":3643,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"119e81d05a39fbd3da4f6404f421b9de","sha1":"67d5bad13d177f7f506c9de30c200cdf23bf94a2","sha256":"514edca91d4a44bf57a2bef28a900e20874a748de1829643929e4570ae45528a","sha512":"aa1f765a5b6c9ff575d56feba439b5b86d0b185a683de929c02ae784c3fd90efbe5e0bf4bebbd085144a0b8480b788d060df463900d21ba6b5073d32c639a41d","ssdeep":"384:+vO9DF8vFMVY/FY6F6FJZqzup2PXX9wWeGYF5fKFEQIKoYbth8:+vO9DFoFAY/FY6F6FJ3p6X6RGYF5fKFo","tlshash":"295212867bb51605b40bd4686c929f96332c9847d44fce7c6be0206cedcc2d869b2f8d","first_seen":"2025-12-27T13:26:29.012829Z","last_seen":"2026-08-27T14:03:18.355881Z","times_seen":5,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/css/root.css","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.067Z","timestamp":1787839355067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/css/root.css HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-556\"\r\nexpires: Fri, 28 Aug 2026 02:02:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1366,"size_decoded":1180,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b814a050cebfe8764328fdcbb83e47fe","sha1":"55a09412429a041b6efa3bcd7a2154f31a09bab6","sha256":"69297d1ef57017b79d168a10288b217f13a8541fb4544549513ac6ea0b1147d2","sha512":"97d2329137259c34457f2e4eeffd85fd08964c90e5beec731da031c285fb0125f7cb34e387f08979af2a75b10638daa4a2291abdfa8e8aad8739d75706394b41","ssdeep":"","tlshash":"2921412726f40a45300ec82072835bab325e98a2a10fd979bfe0320c5d886d3256278e","first_seen":"2025-12-27T13:26:29.036858Z","last_seen":"2026-08-27T14:03:18.356339Z","times_seen":5,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/public_css/public_css.css","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.072Z","timestamp":1787839355072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/public_css/public_css.css HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 207\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\netag: \"69a68772-cf\"\r\nexpires: Fri, 28 Aug 2026 02:02:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":711,"mime_type":"text/css","magic":"ASCII text","md5":"bc8a4184d36d6937f8b0ee51764044ad","sha1":"d2ead814c88e6c7dcec42f027b317c1a60312d80","sha256":"820563cfb72fa6a27dcc963a4cfdd9a7093e876ed70c2be897a3ba382984400e","sha512":"dec5315966de9bf504b441219401379ea464ec7e007645538d3a8ada0b6521585865a0808271d1e030d6913a280e5a5a8886aad50f12fef4a14fbc2b4070871f","ssdeep":"","tlshash":"c9d022c3de9b0482b657d0e04fb222f79abd0803259ac19ab68432f4cf06ec18821401","first_seen":"2025-10-14T16:42:36.052249Z","last_seen":"2026-08-27T14:05:38.77879Z","times_seen":45,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.281Z","timestamp":1787839355281,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-27T17:40:47.361755Z","times_seen":18134052,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/LvmMWfXm.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.308Z","timestamp":1787839355308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/LvmMWfXm.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-6fff9\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":458745,"size_decoded":459067,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x1102, components 3","md5":"002e393f22acd9317f0d0ab0d803e364","sha1":"85a78673dc505146a98c9206db4d232449a472ec","sha256":"5431ea36e1ebc51034d69dc2e9a565a787947ea58e7f82ec2a8407e01b1cce36","sha512":"dd49360f47ab6bafa8a36402f632c0fbd4564ddcbc6340ae2fe1202f005e059da5f9cb5a13d22a7b84d953aec7c2c6d12ec26797598b52001389e41bac1abf8d","ssdeep":"6144:lneLnFtWxoF7I00rk12N2bP2lB5L6apBh2B/uJ1dfRx1o1UVHp07QjNBq4bSK4:lgn867ItG2Ni2lHese2PH1o0QQC4bSK4","tlshash":"92a4239eadb0e8ca9d2f21065cd1d3575996ecc5fecc08347b2a943f88363a19c2d562","first_seen":"2026-06-26T17:56:46.893547Z","last_seen":"2026-08-27T14:04:39.839549Z","times_seen":5,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/ETH.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.312Z","timestamp":1787839355312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/ETH.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-adc\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2780,"size_decoded":3287,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-27T14:21:41.300028Z","times_seen":23461,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/tp.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.322Z","timestamp":1787839355322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/tp.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-7c7\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1991,"size_decoded":2528,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1e7f5dcbe34e0e3aa55a2a425a6e7f8b","sha1":"30408b0e68235d7eec72a684aab19a424b1d5c70","sha256":"5358628ec0e4e50af6754d4a844058013fdccbd94ad83c8e05cd82953844e2ae","sha512":"055c0c19950a28c5211faadcdaf6a6dacbde3ea16bf07b6bb6804ac32eb4aa198ef5bfa0af6106628b134cae554dfd5c652aba00d6ee3784eff73dac2ee6952d","ssdeep":"","tlshash":"ba412ac43fe954f284ef3841b0d74239783c92a15e543a2cde196d7aa6c815c2e1f3a0","first_seen":"2025-09-02T04:51:20.935065Z","last_seen":"2026-08-27T14:04:39.840821Z","times_seen":19,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/0.gif","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.328Z","timestamp":1787839355328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/0.gif HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\netag: \"69a68772-2b\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":549,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-08-27T17:04:07.312224Z","times_seen":40979,"resource_available":true,"data":null}},"time_used":1321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":799,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/css/master.css","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.068Z","timestamp":1787839355068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/css/master.css HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-192a\"\r\nexpires: Fri, 28 Aug 2026 02:02:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6442,"size_decoded":2408,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"1481bcb992d67f6ff7ed870b36b92777","sha1":"0fd74d7f76f67d14f830e7b7b746c365fb37bdc7","sha256":"77ee73cdc723c44f506714bce8e751a197112d634752082273278407fb08def8","sha512":"4daba78bd8f374b99b6472616edb5b23bd73dc5910b0b6389ffdfbe957596220c163534572fcc2b6186dd29da9c7680a9e327a2231bf589cfd983f1db1e97894","ssdeep":"192:88bR/aaKmrg6iFVvpbhq9pffmncRTi1+yg1GmVSFxUj5FFL:82hOFFH1m0mVo45FFL","tlshash":"8dd144c65ba61100b80bd168bdb68759737e8043d64ece7d7ae010acdf8e2d65572b8c","first_seen":"2025-12-27T13:26:29.015638Z","last_seen":"2026-08-27T14:03:18.360058Z","times_seen":5,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/main-image.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.289Z","timestamp":1787839355289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/main-image.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-2c9961\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2922849,"size_decoded":2842923,"mime_type":"image/png","magic":"PNG image data, 4096 x 2314, 8-bit/color RGBA, non-interlaced","md5":"06e877b4104fe1409fd45c3f2346fcdb","sha1":"ce11b388072d2478acc2808796ac4f046b3ac432","sha256":"0db896acd4325d0483d757c7fae6ad89edee5df16bdff6e3c53445b1a874a10f","sha512":"1624c98b5b0b544f5001e264af77c00dd718843570db22b8389eb1ccf1d66a997fedee3b082f616aa5ac57cb79f36205f0f914e972e038986a55fd863026b61f","ssdeep":"24576:Z1DGPk9VKm+4WdOKlh6NPAhzXPEpkBLw6jtmyAEw5:Z1D5XKmUOOoyhDEpkBLlJml","tlshash":"12250102db2b157b768286403a40621b852a9cb7fd2aec1492d7f6cf679bf754f70e04","first_seen":"2025-12-27T13:26:29.031635Z","last_seen":"2026-08-27T14:03:18.360675Z","times_seen":5,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/deposit.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.293Z","timestamp":1787839355293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/deposit.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-d3c\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3388,"size_decoded":3930,"mime_type":"image/png","magic":"PNG image data, 161 x 160, 8-bit colormap, non-interlaced","md5":"545bce4364b5f8fb7c0c78a8a71e5a65","sha1":"0f0bb6ff569dbe151b398a75247bea27c9965be9","sha256":"7639c9b07534bf22f1ba21979412aa9b55b9137fd61740b02d85d1ffeec540ad","sha512":"8b15d4a66822a958413ad1723c9c19d3005c53649914f9e50e8efa9778a5069ed11338eadd20915d5cb0308f44dea058e999bd318046a1f2888d181d8aad5995","ssdeep":"","tlshash":"9e618e38df48cc646afc1f1ac30549b6c6858a9889cb51f757d99107d0e809141ff971","first_seen":"2025-10-17T03:03:36.29397Z","last_seen":"2026-08-27T14:03:18.361346Z","times_seen":5,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/YnKAZYAH.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.298Z","timestamp":1787839355298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/YnKAZYAH.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-4cc9c\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314524,"size_decoded":314656,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"76e4f5535405909a19661b0f5a1221c3","sha1":"b3de9fd350e56f26b169198d03f092981aa885a3","sha256":"5e843cbd3ab2aaa2d2c757eab65f5ea0bd374d55d250319d43d90dde0da3c902","sha512":"e3731c6f7b6c4c228a3a5f59902fe02590b2e8fc643540b3028618b8224a27cdf328293ce8b61ed052f3cd04ab52182895d0d604532262833846e38baa520431","ssdeep":"6144:wJVJfxLiydolZaYtGGV4oi1Q7wnSCQp06CcUP1IJp18hRb7/s9CfUDKg0Ra9A:kVJfliymldGGC17njQp06KP6GJE79A","tlshash":"e3642383098024d047b72afdce1c3247ca7cc916c875d7d688ebe0a27b6869bb65fd51","first_seen":"2026-06-24T11:41:37.854729Z","last_seen":"2026-08-27T14:03:18.361979Z","times_seen":3,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/bfzGENZX.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.299Z","timestamp":1787839355299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/bfzGENZX.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-3bc50\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244816,"size_decoded":240107,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x1102, components 3","md5":"a2676b249e3c7623ee7ed9873afc58ee","sha1":"542268d00d146dd5d36a598c54e54b0d57247c29","sha256":"3c466b945730fe127180a33b14db2a957b7d9085e7dfcd693767ea0248734b58","sha512":"0391d5f922d6ec3fcf0d903b965575ab0202449007ac32aff83faf3840ef7d9a15bfd0c43be537c1574e8def5eba2cc7dea5636f3e262927fbae9b93498789e8","ssdeep":"6144:HJGILBnJcSb6hCskYXVERdlnCNc2Cgk+RnOiS:HJnLBJcSHYXa39CSDIOj","tlshash":"893412d6f62650d4ac06baf44522b2f0973842fd63b9a15b9015017bfc3f8ea7a77c84","first_seen":"2026-08-27T14:02:30.816978Z","last_seen":"2026-08-27T14:03:18.362676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/VjBK6lJi.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.306Z","timestamp":1787839355306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/VjBK6lJi.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-59edd\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":368349,"size_decoded":368927,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"838923c97d48d3fd3a2340cecf2b33c9","sha1":"ad94344979403147b32d9875c08dcb301839e453","sha256":"1c1b8a9c1747b9aa1afa80140bc3502d971be727dcf8d221fb5bb5baa9b903c5","sha512":"035f94712718b87a9107b23ec8f949c6469e9de94343bf73a5bb86c391950fb40b5201b5f34b61deb520c0d830dfd8bc2614dea1d8c1fc82aedafdbeff1b9ff7","ssdeep":"6144:mVwniUFCesP6gf6rwqf/XiySntWcW5+/0ICbhXRtixte3WdfJ6GE/q6dReyd:0AiUFgNf2wqf/XiLW5+sIEXkE3iJ6Z/j","tlshash":"fb74237dd4660a7efd1943398af6e04bd76214bd009843b43752785ff062ba0d3e6e4a","first_seen":"2026-08-27T14:02:30.8599Z","last_seen":"2026-08-27T14:03:18.364245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/TRON.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.320Z","timestamp":1787839355320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/TRON.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-a8b\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2699,"size_decoded":3072,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"739797800c1ad83ba9a3cdddb9824693","sha1":"8fa44745cb0a87a781317153ffebcca127e4c498","sha256":"6de001279f8561ebcd5da21d426f25f0f554b5f665638e84b33876a079c56c52","sha512":"25ec9a6e68a3024e7054c566336ca457a8116c6d29c5b2a901c98ef4d1f14c0adeb8ef16f56bd8d2e07466ee81c0146adc992289efce6a9fa8c2796edd4c0fe8","ssdeep":"","tlshash":"a7511a5335d2fada77c981c3f942215cc720d62d4306a2e7b535078feb06861dba520b","first_seen":"2023-05-17T08:55:45Z","last_seen":"2026-08-27T14:04:39.836145Z","times_seen":3511,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/binance.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.325Z","timestamp":1787839355325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/binance.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-802\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2050,"size_decoded":2543,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"66269b4cfa0d1a33b1f5829cc4d14b1e","sha1":"f401eaeec79fad410778239e5ce7d72ebe5fefa9","sha256":"991bcd7ed73288fb8cf47e0b25d61bad30f4d4d53aa7e91a10ddbd5e0b01623d","sha512":"ee6b0723853d3af5b97bbae448cd78b0c5cf6e1f40071eaaf10acda9a130e3d7b36c462b58b61bbd82af5bb3f90e0b3668f8dfa3d516c91c75be4b427b5cabd9","ssdeep":"","tlshash":"a9413c87dd00ce75960eeeb4aa960b085c90e1211c5a6e241e27c701392ab28565d76f","first_seen":"2023-08-28T01:22:02Z","last_seen":"2026-08-27T14:04:39.821223Z","times_seen":239,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/t1PRm7pm.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.309Z","timestamp":1787839355309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/t1PRm7pm.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-41893\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268435,"size_decoded":268765,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"27adeffdb639e295a83b400436c716bf","sha1":"f00509b195211f8b80a9f78b278e43b4625cdb83","sha256":"4b2a0848f056472084e579147aac9f664787816a85d72ffb097b352c051ae370","sha512":"4cd7b840007b8867d018273c0d5c6748e0a722eb02eebbaa23516fa565d3ad7abf808c8bdc9fb5bfebaa0917c608a3fd4a2a20339bd74b6aebdad4115db628c6","ssdeep":"6144:bsfyN2NNVHG8NIIAXN7dtUYQ4uGTiH5FqdG:bvNIm2IFxgYZuGTiHCdG","tlshash":"e64423a1280dbe9b9c1a4b35de1b9e670ce3d7cbd7ab796210fd33e026422550f9121d","first_seen":"2026-08-27T14:02:30.839011Z","last_seen":"2026-08-27T14:03:18.366647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/favicon.ico","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:39.166Z","timestamp":1787839359166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/favicon.ico HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:39 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-27T17:43:45.55736Z","times_seen":554457,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/LLPs6pF9.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.301Z","timestamp":1787839355301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/LLPs6pF9.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-39de3\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":237027,"size_decoded":236034,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"0bff275a4ec0097a6711abd0293857ee","sha1":"3eb4a5ed65e5533ce94ee0cb85f26f4dfa41894f","sha256":"e4fcd2df885cb1f4b4810a4cfd44b14939fa39cd50460edc4ba2eb3472a1f7d4","sha512":"82e7495e64fe92254b94200d104a746f90e3a800d375c10ee4379f91c9e6ba779f1f75530552dcef71aa7e89c6a9f20aeacd0cad309a9651b0f94dc59e0156f7","ssdeep":"6144:wByWQvw8RcwN+ico/MbUR2uLSJ+5VtWARCkyG7:IyWFLri/e+5LWBi","tlshash":"fb3413a1de431dfe2f4edff0a6b6c446220950bf384ed595b433e6014c3e92ed668a19","first_seen":"2026-06-25T21:56:53.619257Z","last_seen":"2026-08-27T14:03:18.36783Z","times_seen":3,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/FFnqEhnI.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.304Z","timestamp":1787839355304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/FFnqEhnI.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-387a85\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3701381,"size_decoded":3703046,"mime_type":"image/png","magic":"PNG image data, 2730 x 1535, 8-bit/color RGBA, non-interlaced","md5":"4d5e9a8757612e599146726e7949cba7","sha1":"e70462dc7e928730a94232322b8b390e47dc5236","sha256":"b33368a18c76a9d068c37cead6518bdf05ff5c63816b061f70e6b131ad689abc","sha512":"bb91e8cd29d28265d6c62d5925f9f6c5745a44e216eef8a5b11ad1956e0cc3a65d1a7b01966a9f6e946f8e6c31cb6cfdf9fe8c5157f1d03cabfc315f54f87c66","ssdeep":"24576:WhVl5Yv7SEnZ20Yq9uI9ZpfZJ/wKMV8qPHtS0V:W55q7SQZ20jzRJ/uPN5V","tlshash":"ce2533147afd0577906cb49c718befb291d83166eeb80068e844cbc63519af3471bbb5","first_seen":"2026-07-04T11:54:32.85187Z","last_seen":"2026-08-27T14:03:18.368488Z","times_seen":3,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/BTC.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.311Z","timestamp":1787839355311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/BTC.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-a83\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2691,"size_decoded":3167,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-27T14:21:41.307973Z","times_seen":26107,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/BNB.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.316Z","timestamp":1787839355316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/BNB.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-56b\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1387,"size_decoded":1929,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"aef8727bea8367cd9fd252c025b45887","sha1":"c2ab9d909455bff35181dfd92bcc7baba930867f","sha256":"ce5a07d36768bcb5524044a9e92a606ae6effe1cb0913dfa418703461db62fe3","sha512":"5f97e368e23aa5e501e57917aea9426704ac3c4068b34d803f44944663bab45131170fec2872fb868a5faceb6856ce4d9f8870053aba7e8d08455989a731984d","ssdeep":"","tlshash":"5321085f5b644577dda94dbede05a54b29e30d208d978bc2c404ec1534598a643608ad","first_seen":"2023-05-06T05:54:57Z","last_seen":"2026-08-27T14:21:41.258169Z","times_seen":16246,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/css/common.css","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.084Z","timestamp":1787839355084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/css/common.css HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 965\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\netag: \"69a68772-3c5\"\r\nexpires: Fri, 28 Aug 2026 02:02:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":965,"size_decoded":1470,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"42d5b1d36b179dc392e9fdf3c443dc5e","sha1":"38aea21454539a46642f1eb2360241a81693d00d","sha256":"985cea841d725c4c0be02ae491339b6a2e369229d8e5bf9c51d956fdedc27283","sha512":"cdba04430dca3465df0d37264298081831323ce6850bd1715734b3891030aff1b31f86e4d3e30a339a871b8e9edb2be8a5e188200d19ff9fbce354615fdff8d9","ssdeep":"","tlshash":"3011bd4749670d41762bf4940f3886450265904b924fe58e3bc92a488fcf5c8d0b3be8","first_seen":"2025-09-02T04:51:20.901124Z","last_seen":"2026-08-27T14:04:39.818118Z","times_seen":22,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/js/pv_common.js","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.279Z","timestamp":1787839355279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/js/pv_common.js HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-541\"\r\nexpires: Fri, 28 Aug 2026 02:02:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1345,"size_decoded":937,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"18469a3d9e6a10bf606cccdc0867c15f","sha1":"6acdb5b0a0eaa922897f246015a0adaf19ec1f4a","sha256":"70cf49341fdbd69494ad8bb00f1bca86097d8dd1ebcee1c55c507d56f6ad24b3","sha512":"1343b7d57b2a220e3d1e64dc2dd74a721dcaff2d9c377698622e1b706f55307781b6f3e9bceb3b9369c434faf2d55b4dffc6c30be68380ba2f25421e2fe0fd9c","ssdeep":"","tlshash":"7a213d4ae8f724936b53b078068b501931371a2b885ddd183f4d83d94f6c53dd5a56dc","first_seen":"2025-11-01T10:11:19.920889Z","last_seen":"2026-08-27T14:05:38.823414Z","times_seen":35,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/mJ2irkEQ.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.295Z","timestamp":1787839355295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/mJ2irkEQ.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-43a43\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277059,"size_decoded":277557,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"3517e77d3a5e0b04f006c4f4c6655e54","sha1":"a77eb2806f2132ac42f262f6943fb5facdf588fb","sha256":"28bb8d00f21cc9b6c39e97093056a3da272046474f675653ced4b57991a20e81","sha512":"5e78a46183049b9beea893999076c8981e285d1c1fb06d75d6c0f672160dee71a6d533eeaccbd73802332971f66e24f3fec43df207823664212d0cd3b4a25bee","ssdeep":"6144:TD282FyanG81CCNaa4uU4Rrd8HedEoZLO2PopmpRViFY:f282Fya74Va4uU4RJ8eV5HympS2","tlshash":"af44237fdc92c68d819cc9350728e6eb859e6099c88ab0ecce504cf9151f7b4453b6b5","first_seen":"2026-08-27T14:02:30.824409Z","last_seen":"2026-08-27T14:04:39.83474Z","times_seen":4,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/qEBOUvg2.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.303Z","timestamp":1787839355303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/qEBOUvg2.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-6190d\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":399629,"size_decoded":400086,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"cd5337c24137627b02ceee8c473621e1","sha1":"03c333c6ed0b354172af36f40bde3ab4dca5987e","sha256":"1d65e6b69987d766417a4fb76dc6672af3f0fe3066a52cc5d2d27a7af862f7f8","sha512":"142aeb94ea6e7d4032db0bdcc6b21b4ec4e218ae3d608a5738bf319bdc5aa95f5749010abdc61fa8264a2bfe774958c09f556d6edfb945ffb7dfdb1ab0872b35","ssdeep":"12288:zRBHWl0XI2wOcUrr4xGFpbLYoO4EQ2zzgO4bF+yR+:zT2l0Y4rsxGjvXZEjiF+++","tlshash":"8584237dd9e86835e0842f1f27ee673a07a930f0851e7c953b129265b64acd12834fcc","first_seen":"2026-08-27T14:02:30.835472Z","last_seen":"2026-08-27T14:03:18.39318Z","times_seen":2,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/8nH5taS5.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.310Z","timestamp":1787839355310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/8nH5taS5.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-3b240\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242240,"size_decoded":240648,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"3c42fb7d7af1dcf0887da0c452813c6d","sha1":"12c9e79c978a52f9034b2b69591d76b6f88cb6ae","sha256":"ee460dae84763071fe200f0378b10dd7321537c2c65789cd9ac0458b0b7010fd","sha512":"ccd26f8540dd2e3f9462e68538dcdaf26b82989fdb80e5a3a5614006ce972a8b91d5fddfc5f3dc6ff1d6a8f3539138d5db68d86f89d63dab539b7c3cc0f37d99","ssdeep":"6144:g+ZQjehMG6SopWCTs01FQktIqGMjCUs85d+5RDG9ds5LBJ:g+ZGehMF19ICFtIMjg8z+5RD62J","tlshash":"8f342258db722e724d378eb6d3082f18b5e1692de28650d418059f337d2b8dece6a0c7","first_seen":"2026-08-27T14:02:30.84778Z","last_seen":"2026-08-27T14:03:18.396945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/XRP.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.315Z","timestamp":1787839355315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/XRP.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-91a\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2330,"size_decoded":2819,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-08-27T14:21:41.303763Z","times_seen":17913,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/USDC.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.318Z","timestamp":1787839355318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/USDC.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 892\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\netag: \"69a68772-37c\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":892,"size_decoded":1400,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"25bcb059251caa734d596e764838b1aa","sha1":"66e6753403b44dd24721b823817e3029ae14a7c0","sha256":"1bd5b35db23cfbeaee8ec3ae974e46291f9bc6ff08cd717a5713e92c3b9ab02b","sha512":"b6d0efaf80771943be04e0df2293f51d8bd95c4ff8c076236b260caf580a26f8e6948b9c45becadb273cb28690ba92bc130330c2bd9ef7509a96446a33f87c8e","ssdeep":"","tlshash":"361167dc9a5da73cf7547a1bc9126ba8829985b2ce2ef74c10406f39a120eb46085669","first_seen":"2023-05-08T13:54:02Z","last_seen":"2026-08-27T14:04:39.818609Z","times_seen":278,"resource_available":false,"data":null}},"time_used":1330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":799,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/okx.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.324Z","timestamp":1787839355324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/okx.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 420\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\netag: \"69a68772-1a4\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":928,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"015c7115ee3c8e6093e4e4544df3f9b4","sha1":"f551174f0b60806fb45f297bc62213dae8c4e2da","sha256":"67eadd6bf613e6b6a870c43efedc69765ac8608092f0636592f1ecc6ab0e66a7","sha512":"b18fc279e4de1df2e327c6b1525579c506dec015549d9cd7ddf83187251f2927063f1004e45cb43370a3d937b5f3c5f89dc137c443579c5a1652685ef00184bd","ssdeep":"","tlshash":"e7e0c05abaf330b5cde920a64c89fd63803ce72b63151e150a94ecf4560b7d48e9cd17","first_seen":"2024-05-25T12:31:04Z","last_seen":"2026-08-27T14:04:39.799724Z","times_seen":227,"resource_available":false,"data":null}},"time_used":1324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":799,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-27T14:02:33.736Z","timestamp":1787839353736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 27 Aug 2026 14:02:34 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:02:34 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:02:34 GMT; Max-Age=7200; path=/; httponly; samesite=lax\nserver_name_session=e0421870ef46d5871a06f12afe8db3e1; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-08-27T16:02:34Z","raw_expires":"Thu, 27 Aug 2026 16:02:34 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:02:34 GMT; Max-Age=7200; path=/; secure; samesite=lax"},{"name":"laravel_session","value":"eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-08-27T16:02:34Z","raw_expires":"Thu, 27 Aug 2026 16:02:34 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:02:34 GMT; Max-Age=7200; path=/; httponly; samesite=lax"},{"name":"server_name_session","value":"e0421870ef46d5871a06f12afe8db3e1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_name_session=e0421870ef46d5871a06f12afe8db3e1; Max-Age=86400; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37920,"size_decoded":13284,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (391)","md5":"8c6a3af0755d7a3d50a5c72bf44fc140","sha1":"ac127d6f8f75453e70c780e9388731ba6f0b475e","sha256":"bb9d94ce0d03ceb4bca653981f4ed7c8ed040cb996ed059a33c7b02c46a0e732","sha512":"51a880ea0241a3ab0117dbf1e0715768506a611c7122c8905c2979df9947563d809f8afd4a67fcb3c756ca46786fa058a0e5ae388b9080c94f4cdb2eb8500e8f","ssdeep":"768:HvOVdbSzbUCau3DCscoXHsVJrjT0gJtto38Hg/ncJnjnsln+tnxn0kNb:HmDGGuOVoXMVJrjT0gJtq38Hg/ncZzsc","tlshash":"3ef2b42600facc7b1192a1c169322b1e39d6da37db674954b2fe8ec94fc7d90cd0b609","first_seen":"2026-08-27T14:02:30.841408Z","last_seen":"2026-08-27T14:03:18.399619Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1084,"timings":{"blocked":-1,"dns":42,"connect":259,"send":0,"wait":519,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/click.svg","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.290Z","timestamp":1787839355290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/click.svg HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 478\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\netag: \"69a68772-1de\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478,"size_decoded":918,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b15aec21024435934db72d71246e376","sha1":"d76f90150f5edb31a67594795f6ad9b76f11ae1c","sha256":"227d064bbb6d219382146625e13afb505acb16c40e21f45ec9045e3dc4ea8c7e","sha512":"1c169459882405580ebb8150a6a999327fcf5d3266d00e64c080648a0674908796872c3cee0380eb579bb6fa5f9d0a143adc772c39774035eae48b872d406319","ssdeep":"","tlshash":"0af0977c030cac8cb813c120eb153676a33fb1913228033c487fa932488364dea33898","first_seen":"2025-07-03T21:03:34.150092Z","last_seen":"2026-08-27T14:04:39.831069Z","times_seen":79,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/create.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.292Z","timestamp":1787839355292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/create.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-c88\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3208,"size_decoded":3750,"mime_type":"image/png","magic":"PNG image data, 161 x 160, 8-bit colormap, non-interlaced","md5":"361a880ccb08379a79d921620acce826","sha1":"90948d7429808bc9a846f94bd35aaf3a3adfb6d6","sha256":"4531cd8d0209e8745bc7b72c770b2efc464323bf18a2041cb3830cb142e5d7bd","sha512":"6969aca69f54f6477f4639c3335362ec14e120bb94d19a8cff3d9ab4b1984bc57cf5a2e4b561d82008f7237d9b36c84b8c40c6ab15e90b005b9f79305666e2ed","ssdeep":"","tlshash":"3f612b1e77556e9d5c149c5bafd7802bcad4cd2c9bd7722b3b56880e08d69c48ce1281","first_seen":"2025-10-17T03:03:36.237676Z","last_seen":"2026-08-27T14:03:18.400912Z","times_seen":5,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/trading.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.294Z","timestamp":1787839355294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/trading.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68772-fac\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4012,"size_decoded":4544,"mime_type":"image/png","magic":"PNG image data, 161 x 160, 8-bit colormap, non-interlaced","md5":"6400f64375aedba385106249126d0614","sha1":"a8a282c01f5c3458261e6dca19b51d0df396d022","sha256":"4a35847b975c93feffbe4f18d5f23686642ffccc0e456a662d706dd3bd90dd25","sha512":"b4c0cc8845c9116df84ffccb2793055adc3618d9ff7d7eb2bba4eb37901ea95c9d17096c6c9408d2083bb094389726e1c6e174fc36a820c16b12d8ebd2385567","ssdeep":"","tlshash":"f4817d3b4668fc41eb3a7063b03d61fbaa520f7d82029d3c45fdadea191940304823f1","first_seen":"2025-10-17T03:03:36.384249Z","last_seen":"2026-08-27T14:03:18.401612Z","times_seen":5,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/news_img/w68IMwz6.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.296Z","timestamp":1787839355296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/w68IMwz6.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-4d712\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":317202,"size_decoded":317747,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"899d7c8c1d2a61ae833a6242029f2262","sha1":"2f2fc703667f419ec752c5f5d99d4f71b53bc2b5","sha256":"cde94f84c0c2a2f3319eedc8f667f7b429e31ce612c67693c2833939bc3f0763","sha512":"933ffa28f9d81bceb140105eba4eb05d60ec149d82dc147a946b150a7bffd9bc69b012ea0d96e504a1f4f9a6f1d9277eeca481ee2ff9400ecab6f2c0dbaa25d1","ssdeep":"6144:5Eh9LtE6NCJdTaaIfRT4bzmxvgU5q4qcelRTftpzNf3qHmg:5E9N2deaAWbzmmUpejtNNf2mg","tlshash":"2564235b86e30748f54d1631be6084edee88cecd6b1a779389e69defb0c66905d1c8c0","first_seen":"2025-09-02T04:51:20.878706Z","last_seen":"2026-08-27T14:03:18.402334Z","times_seen":4,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.ax-binance.com/static/5/img/bybit.png","fqdn":"wap.ax-binance.com","domain":"ax-binance.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.ax-binance.com/","date":"2026-08-27T14:02:35.326Z","timestamp":1787839355326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/5/img/bybit.png HTTP/1.1\r\nHost: wap.ax-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.ax-binance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9Jd3F6cW9yVGF5M0tTeTV1OEQ0bFE9PSIsInZhbHVlIjoibm1sOE9FMGtzZDI3RFpFbUY3WHFPVk9PME1IcXozQjM3UUtLMTFYd1Z1OHlFQldxU3JKV1hVMFJMekVCQm9VYTFkeExwekw1bTAvSUMxSUxEZThPTzB1Mm96dmhvUFg2MXVmSXVMRDFMdlI2cjhZcG9CK0NhUGJnL2VkeE5sbi8iLCJtYWMiOiIxMWUyOWYzMmI5OWE4ZTQzYWEyMDVkYzI2YTRkOTJkY2ZkMTJiZjMyYTVjMmYzM2FmOWM0NTE2NjUwYmI1MDg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpzalY2Qk10NFBCUWJPNWZZbEFkMEE9PSIsInZhbHVlIjoiWnh4WVZCVXNmbTZYbzBXVUhEMEdFcHExSnFhdU9yUDIxeFh0Ukdvd0xBdktDU2ZlL3daRGZFbUpQK0ZjN09TU0lteFMwKzVJeTNyVFllNEFqaWNGNmhYdHFCSGJGaVdaUFBwNFVFUnE1SFNkZTlYNVYxMHJ2VkVHdVJVMHZKZUgiLCJtYWMiOiJhZWRkMWNiMzJiZWVjMTJhZTE3ZDlhM2M0ZWJmOWYwNTFjOWRmN2M1NzVmMzJhNzZjMDQ1NmUxZjg4OWRhNTAyIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:02:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 418\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\netag: \"69a68772-1a2\"\r\nexpires: Sat, 26 Sep 2026 14:02:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":418,"size_decoded":926,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"57e82f79e42f5465d44ffd51b8034e99","sha1":"c0a7499077e33b32052d5d9fa83f2b5c3b7e2c90","sha256":"28f7b537ed3a233e0e95944fcfea4ea4340204a3a8ba57622e85ef7fe25ec4c4","sha512":"cfb2eedc76e9d2fe3e46b6736ef9fed638eb3c0d8fa75ca934978bd3c150ee719cc4284c897647fdadcef2adef550e4a49361d38739c7ea567c3e8a851067dc3","ssdeep":"","tlshash":"2fe0ab83e1b66d5682cd0d6aa11e3160286a2c403e12f289c22963e21f15a4123f82b7","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-08-27T14:04:39.801701Z","times_seen":213,"resource_available":false,"data":null}},"time_used":1322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":799,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.ax-binance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.ax-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}