{"report_id":"0e369665-2f36-44dd-8c80-5a5a9e0fa90f","version":6,"status":"done","tags":[],"date":"2026-03-26T14:15:08Z","url":{"schema":"http","addr":"m3a9.nasdaqt.vip","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":0,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/#/","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"title":"NASDAQ","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T08:46:19.269091Z","times_seen":17900155,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m3a9.nasdaqt.vip","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":0,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T14:15:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":54140,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.679399+0000\",\"flow_id\":553450548865980,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":54140,\"dest_ip\":\"47.254.187.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echang-bucket.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6993,\"start\":\"2026-03-26T14:14:53.633788+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":54168,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.682123+0000\",\"flow_id\":790867751054938,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":54168,\"dest_ip\":\"47.254.187.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echang-bucket.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6993,\"start\":\"2026-03-26T14:14:53.634458+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":54158,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.685813+0000\",\"flow_id\":1429671121890798,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":54158,\"dest_ip\":\"47.254.187.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echang-bucket.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6176,\"start\":\"2026-03-26T14:14:53.634350+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":54154,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.687889+0000\",\"flow_id\":1001980426038634,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":54154,\"dest_ip\":\"47.254.187.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echang-bucket.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-03-26T14:14:53.634218+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":54152,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.691711+0000\",\"flow_id\":1143130231254266,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":54152,\"dest_ip\":\"47.254.187.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echang-bucket.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6993,\"start\":\"2026-03-26T14:14:53.634106+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-26T14:14:53Z","timestamp":1774534493,"ip_dst":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":54146,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-26T14:14:53.694672+0000\",\"flow_id\":1725723217603713,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":54146,\"dest_ip\":\"47.254.187.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echang-bucket.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6176,\"start\":\"2026-03-26T14:14:53.633985+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"m3a9.nasdaqt.vip","ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"domain_registered":"2026-03-22","domain_rank":0,"first_seen":"2026-03-26T13:09:18.852768Z","last_seen":"2026-03-26T13:09:19.378284Z","alert_count":88,"request_count":44,"received_data":5439267,"sent_data":28565,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-03-09T15:07:31.724264Z","last_seen":"2026-03-23T14:49:25.326525Z","alert_count":0,"request_count":16,"received_data":836597,"sent_data":7376,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"118.25.42.241","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-03-25T20:42:33.284631Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c8dc7084ccedd200dbcc901dcd73a13","sha1":"38a03cd58eb5506ba97431b4067e6cca5b09e247","sha256":"c5011a1eb2bfb84aaf99bed8e4b33f56606093dacfd66eab6ba99da7712af8cd","sha512":"fa34c39341a5a5423c87a44dc60afafce734e50e4f29b4c85e0abc857c4d1aca544903b4f8f66490116d0148460a6484bf2ce472ed4adee854ebbbf2436fedb2","ssdeep":"","tlshash":"8be068c360a6294c01208016304ac1031bb608b29ec149611c4867a59ab9e4bc56e859","size":346,"data":"","first_seen":"2026-03-09T14:06:13.858306Z","last_seen":"2026-07-18T23:25:11.757477Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/platform/charting_library/charting_library.min.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73888a0685ab02a24d8b6e54a879a38","sha1":"23120140a47f8bded49278d2082d8c0719724c1a","sha256":"6f8e68ad06adb780cc5c453fa8bca624b03f84ba755d74d1f95d4dd620f21cc8","sha512":"76e479133f3e066876263ee91e72ad3793b5aa668cc4639270034e21afd79c8c13516101679c57eb7b75481ed4a3333bcd8f043fbb3f63e4f149e0524b8222f1","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffak:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvM","tlshash":"6d224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10857,"data":"","first_seen":"2026-03-09T14:06:13.817835Z","last_seen":"2026-07-18T23:25:11.718672Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/691.06d1e32e.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"76797fdf8ec89053d37c33950c542b63","sha1":"9fc11de5ca705b3c19f418cf59e9ae465aa3e515","sha256":"c81df67694820e965bd7e34ce173bb6836192f869a05713edc517f93757c227d","sha512":"084f532bc81ee74b3897e6fd8aedf6b4798fcd68262934acaca589957a550c685f79577c81b90c4d4a6666dda680420c8d96e2835f0ecb151c0756af855fb44c","ssdeep":"12288:E9aUiJqEvIMz1XGqsdXLu2I4QjvXrcOW3O+rCoBVV200L35OAMy0xGd2065ekDYf:E9aUiJqEvIMz1XGqsdXLu2I4QjvXrcOD","tlshash":"d284cf9e9895124996234aa387dd5e944b3cdba351720cee3352284f8f43fad33de217","size":394993,"data":"","first_seen":"2026-03-26T13:09:24.969262Z","last_seen":"2026-03-26T14:42:44.103411Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/619.039ddd7c.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5229a4a3b0119770a8aff90f8a81d86","sha1":"1123e45660c8cdeeb0e67ac9db3d57ae792c204d","sha256":"a4c681628f4c39d8f0c7ae17d61cbde54513e89d5b6ba24ebad3a7bd188b3628","sha512":"ad735c2cf023a0ac9d15069a819a60895801f8feaccb62b720df56c3e176d41110ab28ec390faa8ba00eeda952faa7e35cdedb03631632beb24eaaba33782593","ssdeep":"1536:mS93t/S6mfg8awhqq56AX3zhs6uNK3fdvwwa3leMfT2yMWyzDSOeTznE0h4C90SY:/yzDSOeTznE0h4C90SvsyZW3IEt","tlshash":"95938dae9c91134980274a6287cd4ea44f3cd66354625dde7362280f8f4bbde33ee617","size":94859,"data":"","first_seen":"2026-03-09T14:06:13.742683Z","last_seen":"2026-07-18T23:25:11.747145Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/537.d19bcea5.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"960802eee5d2fa7fdb7d98b7985ec08f","sha1":"0b9790de2730c9fa0a5130f276bfa3ac55353fe8","sha256":"2af652c370f7ae5f725b2efc663c4e37f7d7da49b6cfb8e82e03261f8e65a06c","sha512":"c75d28b038b31754676d571c93ac42255236fc4b9a4adc36e7289ad16f57c06dd8a6c06d1287fb2459f875483595a8fa2c0df5ba8d25337828d9d5c667d7b450","ssdeep":"768:r9N/iP2tocs3sVsVs7sTsBsdsbstsenA5tdl/zH0JtqvO/C2:Likocs3sVsVs7sTsBsdsbstsenA5tdlu","tlshash":"0ae24128759aabfe179235283cf70426753a0f6159cd50017bf6e2e7b4b108b293bb5c","size":32671,"data":"","first_seen":"2026-03-09T14:06:13.80398Z","last_seen":"2026-07-18T23:25:11.723431Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/3966.cde89848.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2657bd9002faf76a7b6a177ffad3c030","sha1":"428128e7a71f014efdc1dbfdc0e5e0e2ebdf0ca2","sha256":"be198da81901659ba316805f0c66b757c64191c0e650c785097e427d6d43e42d","sha512":"8f207b73314ecc04d0eedd860c2a61b7d748bbddc607e27ef984afcd15658e14226ffddb45c6fe5d5e5d011214acd4788a1ad6c15512d54819df4dd3b7542672","ssdeep":"1536:Vq271pU6uNn3fduwwamleMfC2yMQTU2GPWG7qI51N+0szfBOwM6UJohTh:Z5pqTU2GPWG7qI51N+0szfBOwM6UJm","tlshash":"d3a3aeae58a1124d82274a6687cd8974473dd6a314b20dee7255284b8fc3bdfb3cf217","size":99997,"data":"","first_seen":"2026-03-23T14:49:32.992813Z","last_seen":"2026-03-26T14:42:44.14241Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/pages-home-home.62b08dc2.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3b2cb37baa26ee6c14d080c84e9d8c4","sha1":"872d325606c296c96446a4a934d3effd088b17f8","sha256":"de14649742f59024815a125f744ef0c4615abcadb74e3a673e957b2d0cb162ba","sha512":"c88cdd31c5121c6185133eca8dad50aa1983cb5eb441daa2aea086aac3c001943516ea6753bc2b7b3a0405df326dc43dcf47003def1ab47f3c90862f2b15d19e","ssdeep":"12288:DfZnjUyC3mirukdlZ6sUDH1awUeANmpqgaNewzMEjh/OSQJTrWW0cQz7mzzeKyjp:tjUyC3mirukdlZ6sUDH1awUeANmpqgaD","tlshash":"5284e0ae9891124995234ba2c7dd8ea48b3dd66715720cee33512c0b8f47bde33de217","size":402160,"data":"","first_seen":"2026-03-26T13:09:24.964752Z","last_seen":"2026-03-26T14:42:44.131388Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/waf_protection_029e1b8c9ccb785c9595899302448d78.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed4adc9efcea8e881951d222396719ad","sha1":"9ddfd9324215ffa4c93ef58d5ed56bb9101ca9b3","sha256":"12ae70c474a972509cae48ae2781e4bac8ddded10bc6f74e5bd2626b59d83e37","sha512":"f7ba270f94cb6a3414cf51c0445118a9d19c2b9da10398dc64405c43e929213e0263f6988b7bf4ca15a80ebbcdca55cfb5e1979b966c8aa0a40dde1ce742b72f","ssdeep":"3072:qC3T79xa0O79e8cdUIGTh3S9g1iDVNh3tyZZ5u4eQI7M:H79xa0O79e8cCI+hC9g1iDVNh3ou4eC","tlshash":"15c3634022e06809d397db7a372bb4e1f41d796b7ec24c8fe314be986685716fae1530","size":119055,"data":"","first_seen":"2026-03-23T14:49:32.997187Z","last_seen":"2026-03-26T14:42:44.14518Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/chunk-vendors.35ee6864.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ac0c78ae79aebb2cc0760b01c5694af","sha1":"aede863391e2bb7aa8d5da072e9b71149afada55","sha256":"ded331706044e7be318cfabd92a5ab550d2b598858268562c1b39714494be2d7","sha512":"a117035b59a46a67798bb1aeabba744949bcf3788fce97046e3283f95bb8ae2038a8aa5df7ae60653f08b8f5286367ffc5405ec394b50b2d44367d1cacb0fd4a","ssdeep":"24576:+GA31lRHNnVa175cduhazTzOp3MvRWojTX/KYK:+GA31lRNnVaFSoIzq3MvRWojTX/KYK","tlshash":"38752a88b291b0b107eb20e1507f110bf23a7958744a84a8f679e4e67dbd98d5277f3c","size":1593095,"data":"","first_seen":"2026-03-23T14:49:33.039563Z","last_seen":"2026-03-26T14:42:44.158302Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/index.344d28b0.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a6f7ce480744ef18525688d55262097","sha1":"72bce8e70bef47b79dbc72d077b00f849b8b4572","sha256":"a40d7afa7643d0fdc9fdf7213d8e1d73b52a3b6cbebb7298b9628889b245d1bc","sha512":"4d2e3b5131f350066bf390b1c20c204c6df0bc081f35a9313c88d92803b0aa179c8119f81845014aa501e4c1bcf6533ba30b84d30f54fa3bb22ef8279c91b549","ssdeep":"24576:a+vUZIwb1XAckND63/yx50rveB0xTzTXzmdjUQJVepjMXFkID9Q+hs9gwcqZv09L:a+vejmdjUQJVCjMXRQ+hs9gwcqZv09SS","tlshash":"25656e4b5decaeb606e627e3f08a3e3554fc0da1a39148fa46f6c98d87d8b109343535","size":1437456,"data":"","first_seen":"2026-03-26T13:09:25.051056Z","last_seen":"2026-03-26T14:42:44.157488Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/4373.6e313002.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc3230c8c205ae59f3f62dc51b6b872a","sha1":"97015fbc16fbcdf2f8a27e9c0f1b16e90e0141c7","sha256":"84a8af8cb616902def23d928810a68231ee5808a2909c18ea8367daa80ea8c75","sha512":"63c634ed7127edebe1989fa2a9195e4911115ad14de98914876221e36870745b21203a90bcbbacf3e104dfaaa2931feb7aa3d5d46ef2bdc2a5f00b6573bb5474","ssdeep":"1536:de6uNX3fdywwaaleMf22yMI7caS3uKjO8dFxqEUbXVSgs+4Ng:O7caS3uKjO8dFxqEUbXVSgs+4Ng","tlshash":"9093ae9a68a1524985235b6287cd9ea44b3cd76318b20cde73922c0b8f43bdd33de757","size":88848,"data":"","first_seen":"2026-03-09T14:06:13.810198Z","last_seen":"2026-07-18T23:25:11.755706Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/8383.49bb6911.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d50432d150c727cf241189530e9decc","sha1":"7174cb1cef5cf9535ca3d5a23de884caf354d1de","sha256":"2a1ce7ea1e03641d971affc062af57401a7286be156131a210b93c32cb568a47","sha512":"8fd7a791755135f282915b771c9dd5eaf9cdbf5be6afd58adaa7b8464fe43efcc820f3b6b86251d23ffc52c7608b4f6d98c916ffa917f6fbcd2f518213adf956","ssdeep":"6144:vgYh2MW9ycPQorFfi+UB3Ty6Ug87VPQKmTm6Tmgt9Jmg0v/FuEcWMdUjQGu3KW/W:Zh2MW9ycPQorFfi+UB3Ty6Ug87VPQKm+","tlshash":"1d849eaa5891128985334aa687cd8e644b3cd6b354721cee73552c0f8f43bee33de617","size":374523,"data":"","first_seen":"2026-03-26T13:09:25.011939Z","last_seen":"2026-03-26T14:42:44.15055Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/platform/charting_library/charting_library.min.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:49.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/platform/charting_library/charting_library.min.js HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m3a9.nasdaqt.vip/\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3172\r\nConnection: keep-alive\r\nAge: 5381\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nEtag: W/\"69c4ce6e-2a69\"\r\nExpires: Fri, 27 Mar 2026 01:08:52 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: 47681f9fe65990f5ca116014c1d72715\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10857,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with no line terminators","md5":"e73888a0685ab02a24d8b6e54a879a38","sha1":"23120140a47f8bded49278d2082d8c0719724c1a","sha256":"6f8e68ad06adb780cc5c453fa8bca624b03f84ba755d74d1f95d4dd620f21cc8","sha512":"76e479133f3e066876263ee91e72ad3793b5aa668cc4639270034e21afd79c8c13516101679c57eb7b75481ed4a3333bcd8f043fbb3f63e4f149e0524b8222f1","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffak:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvM","tlshash":"6d224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2026-03-09T14:06:13.817835Z","last_seen":"2026-07-18T23:25:11.718672Z","times_seen":29,"resource_available":true,"data":null}},"time_used":762,"timings":{"blocked":302,"dns":0,"connect":148,"send":0,"wait":152,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/user/getCountryCode","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/user/getCountryCode HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: \r\nlanguage: \r\nContent-Type: application/json\r\nContent-Length: 0\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:51 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 5e287ba7f7eb4bc444e9d43cf00d125d\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22018,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (20211), with no line terminators","md5":"ec520b3418b581b9b42e2cc0d95ab2bf","sha1":"58b482f8adfa2ae036d957b880fd0c0879944736","sha256":"b97120c2c7995a2b13bb06e5ebe79fbea4f97a04eadb63431f57d3b8a0f54ee1","sha512":"bfed4de1b10c5c8095d1363569674d0d8ab162d7ffe682811df3e173c4de42aad0bdb0f0575b267ad0b479509bc0fc495d89b64a71a8840d1ece8e76c0008778","ssdeep":"192:0N412kx/U7/cLVkL/GWJfQXvAYLB4lVDiZ6OU1L2cCDQHk3jnB8LWlAQnZU/6Eun:0NouXcvAz2Z6UFSy2WQ2gn1C","tlshash":"32a22f7e650cfd6dbf24a6e3a04b27390ab5b1bd06c85c1bd5cc9eb2f2d16a92431530","first_seen":"2025-09-21T22:51:26.860054Z","last_seen":"2026-07-28T19:31:07.55319Z","times_seen":96,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/pages-home-home.62b08dc2.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/js/pages-home-home.62b08dc2.js HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":402160,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d3b2cb37baa26ee6c14d080c84e9d8c4","sha1":"872d325606c296c96446a4a934d3effd088b17f8","sha256":"de14649742f59024815a125f744ef0c4615abcadb74e3a673e957b2d0cb162ba","sha512":"c88cdd31c5121c6185133eca8dad50aa1983cb5eb441daa2aea086aac3c001943516ea6753bc2b7b3a0405df326dc43dcf47003def1ab47f3c90862f2b15d19e","ssdeep":"12288:DfZnjUyC3mirukdlZ6sUDH1awUeANmpqgaNewzMEjh/OSQJTrWW0cQz7mzzeKyjp:tjUyC3mirukdlZ6sUDH1awUeANmpqgaD","tlshash":"5284e0ae9891124995234ba2c7dd8ea48b3dd66715720cee33512c0b8f47bde33de217","first_seen":"2026-03-26T13:09:24.964752Z","last_seen":"2026-03-26T14:42:44.131388Z","times_seen":3,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg70be7839734f487ba2f901e1e516e9f4.png","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg70be7839734f487ba2f901e1e516e9f4.png HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4349\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5E72F0669DB5DFF9F4\r\nAccept-Ranges: bytes\r\nETag: \"95B0A553278DBB9CAA724CC2D34CCB90\"\r\nLast-Modified: Tue, 17 Mar 2026 08:02:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17502806995776853540\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lbClUyeNu5yqckzC00zLkA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4349,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"95b0a553278dbb9caa724cc2d34ccb90","sha1":"b74c6a07c04c92f1fd45ff4f3579e9b8b90b71de","sha256":"6dd9733c3a72a2b6c3ac7ab4f08a0f6ad2bcc4882d33899313b8cac2339a596d","sha512":"04e6443d7466cc442108f53cf8cfd54df34c85facd72e55c3950905a83b0e1b232c75673f4b2ffeed074911dbdffa45efcc2013ae7254f45113a2ab0edf9b7e5","ssdeep":"96:GeZ5OuAWksGPlANjpVqXXRLsC/dMhsGcnj2moD6VwdchsDWNbVC5sWyXA8vp:bZsprsiQmXXRFdMij25ResiNysA8vp","tlshash":"e0915d782cd5d583de7e4ffc9265ab5deeb1420601c281322d77eafe0448227bc21d26","first_seen":"2026-03-23T14:49:32.974741Z","last_seen":"2026-03-26T14:42:44.143056Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1164,"timings":{"blocked":949,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: 6b2d1e06f30709a11774534493022\r\nContent-Length: 52\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":52,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"GC\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 41e369ececda9483940e5f9f12c01622\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7869,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1b8d034114119f3e045b93721a6c4b79","sha1":"ed56032fb5745e62d06018556c5a8fdbed5bb849","sha256":"49a4eaad318ca55cf8c6c2071f8c88d84c7e9109bccb93c6cc41cf12cc44c5a4","sha512":"92e946b1237d29eba70330131d122b28e10d5b0400a1122c152c31064199cb685c9347b29fabdba63172df5d493881f8249057560e7134ba096a499ceb941105","ssdeep":"96:Qxmu19dQPLg82JcQMlNsJM6dwYBwapwZLqdbtnwbpBhao9eGSvb:Qxf1DMN9yFKoH/D","tlshash":"00f110bc0b659044cc339cf2ef9b7de89d12b2c66ede8d9191bcac0c1a54231a1657f6","first_seen":"2026-03-26T14:15:14.90717Z","last_seen":"2026-03-26T14:15:14.90717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/index.ed4a2d2b.css","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:49.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/index.ed4a2d2b.css HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m3a9.nasdaqt.vip/\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:49 GMT\r\nContent-Type: text/css\r\nContent-Length: 26501\r\nConnection: keep-alive\r\nAge: 5380\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nEtag: W/\"69c4ce6e-1794e\"\r\nExpires: Fri, 27 Mar 2026 01:08:52 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: 502b726612fa661a7f7b6a1fefebcb2c\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2c05a28c7f2113821d909b7b5b918a3","sha1":"ccac94311f6ac6f580b64f47f7705318f1d226a3","sha256":"695bdbeea38a126c139158967cdd4f3a435e9936b9dff5b002e5f20a10fc7907","sha512":"3b96fbd1a89be8ae0b7479705cd4a2958ffe7f2f3f57ec23f407ad51ed8b447b9960728d77502e8fd8b2b19bf0971682030117559df250ea11c9bc1802364c3c","ssdeep":"1536:qlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:hApuK7hmVrS1Wu3iG41nrPI","tlshash":"4493f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-10-16T12:28:28.877032Z","last_seen":"2026-08-15T08:59:26.073129Z","times_seen":1825,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/3966.cde89848.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/js/3966.cde89848.js HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:52 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 13195\r\nConnection: keep-alive\r\nAge: 5662\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nEtag: W/\"69c4ce6e-1869d\"\r\nExpires: Fri, 27 Mar 2026 00:42:21 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: c188e8787ce0f522b7c1bbe8e85a71e5\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99997,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"2657bd9002faf76a7b6a177ffad3c030","sha1":"428128e7a71f014efdc1dbfdc0e5e0e2ebdf0ca2","sha256":"be198da81901659ba316805f0c66b757c64191c0e650c785097e427d6d43e42d","sha512":"8f207b73314ecc04d0eedd860c2a61b7d748bbddc607e27ef984afcd15658e14226ffddb45c6fe5d5e5d011214acd4788a1ad6c15512d54819df4dd3b7542672","ssdeep":"1536:Vq271pU6uNn3fduwwamleMfC2yMQTU2GPWG7qI51N+0szfBOwM6UJohTh:Z5pqTU2GPWG7qI51N+0szfBOwM6UJm","tlshash":"d3a3aeae58a1124d82274a6687cd8974473dd6a314b20dee7255284b8fc3bdfb3cf217","first_seen":"2026-03-23T14:49:32.992813Z","last_seen":"2026-03-26T14:42:44.14241Z","times_seen":7,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":468,"dns":0,"connect":0,"send":0,"wait":207,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/8383.49bb6911.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/js/8383.49bb6911.js HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:52 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 36807\r\nConnection: keep-alive\r\nAge: 3957\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nEtag: W/\"69c4ce6e-5b6fb\"\r\nExpires: Fri, 27 Mar 2026 01:08:55 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: 2f54c9d3e1ddb26a9a0405e4479f5322\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":374523,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"8d50432d150c727cf241189530e9decc","sha1":"7174cb1cef5cf9535ca3d5a23de884caf354d1de","sha256":"2a1ce7ea1e03641d971affc062af57401a7286be156131a210b93c32cb568a47","sha512":"8fd7a791755135f282915b771c9dd5eaf9cdbf5be6afd58adaa7b8464fe43efcc820f3b6b86251d23ffc52c7608b4f6d98c916ffa917f6fbcd2f518213adf956","ssdeep":"6144:vgYh2MW9ycPQorFfi+UB3Ty6Ug87VPQKmTm6Tmgt9Jmg0v/FuEcWMdUjQGu3KW/W:Zh2MW9ycPQorFfi+UB3Ty6Ug87VPQKm+","tlshash":"1d849eaa5891128985334aa687cd8e644b3cd6b354721cee73552c0f8f43bee33de617","first_seen":"2026-03-26T13:09:25.011939Z","last_seen":"2026-03-26T14:42:44.15055Z","times_seen":3,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":452,"dns":0,"connect":0,"send":0,"wait":159,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: 2fdb9864823cf8dc1774534493024\r\nContent-Length: 52\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":52,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"SI\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 32feac9921ac1144c64301c898cf1e71\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7209,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"66cb5e0d543d8cd774d2866884bb7e1c","sha1":"b22d8916d3f329871370d344c4c83b16f8cd114f","sha256":"106b9ffd6727f9c21ca48b35431d2c1118416096f0688baeae2f6330ef96d7dc","sha512":"83701f95d021baee525a94bbd75cd110762e979c11c62033d6d6edd086bc0485b35bab93c86c89ff14852d1a29d0f0e87b5e603461dab823c45ee92d6a250ceb","ssdeep":"96:2xOAnZcX92ENWAAr+nRpgFIQKDAZbTdOMUptmEyNeifJruuTlvzADZJi0RAHMe2a:iIdnDY4gn","tlshash":"8ce1babc7f98808ad935cd926fd3bdb08121b1c25ade8d9532ac685c39d423fb1247c6","first_seen":"2026-03-26T14:15:14.913803Z","last_seen":"2026-03-26T14:15:14.913803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/notice/list?key=ROLL_NOTICE","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: db51237bfdd89a021774534493044\r\nContent-Length: 0\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 6b5dd84a2e006cb2a3e463b8cc4b3e2f\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":742,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0c1f8a05e8cd584ab551d97f525b5ef0","sha1":"7aeee4b910981182e5c980fbfef5b57fde247b8a","sha256":"0cdf30690014be45e3eaa66088d4cea1330b636f14a3d30e605ae4103466b6a1","sha512":"d9456d25bffb3c07f21fa7967927b515cd212021b7590c6435d0d6ba499d662c73a4ce813d2602fdc292a150bd6e9a7545a0e186df1debcadb2c3e09c70332e5","ssdeep":"","tlshash":"7501689a00b4deb9080584db538dbadcd20d2a43cd20cd30b6a6cf94c2e51b51e17656","first_seen":"2026-03-23T14:49:32.958526Z","last_seen":"2026-03-26T14:42:44.13491Z","times_seen":7,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/619.039ddd7c.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/js/619.039ddd7c.js HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:51 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 8539\r\nConnection: keep-alive\r\nAge: 275470\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nEtag: W/\"69c4ce6e-1728b\"\r\nExpires: Fri, 27 Mar 2026 00:42:20 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: 93e20a2784174bf2c3bb69a29a8be832\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a5229a4a3b0119770a8aff90f8a81d86","sha1":"1123e45660c8cdeeb0e67ac9db3d57ae792c204d","sha256":"a4c681628f4c39d8f0c7ae17d61cbde54513e89d5b6ba24ebad3a7bd188b3628","sha512":"ad735c2cf023a0ac9d15069a819a60895801f8feaccb62b720df56c3e176d41110ab28ec390faa8ba00eeda952faa7e35cdedb03631632beb24eaaba33782593","ssdeep":"1536:mS93t/S6mfg8awhqq56AX3zhs6uNK3fdvwwa3leMfT2yMWyzDSOeTznE0h4C90SY:/yzDSOeTznE0h4C90SvsyZW3IEt","tlshash":"95938dae9c91134980274a6287cd4ea44f3cd66354625dde7362280f8f4bbde33ee617","first_seen":"2026-03-09T14:06:13.742683Z","last_seen":"2026-07-18T23:25:11.747145Z","times_seen":19,"resource_available":true,"data":null}},"time_used":800,"timings":{"blocked":314,"dns":1,"connect":151,"send":0,"wait":167,"receive":1,"ssl":163},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg49228dda85234825b289b2348df18942.png","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg49228dda85234825b289b2348df18942.png HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5045\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5E690BB99EF577C643\r\nAccept-Ranges: bytes\r\nETag: \"1BFD4FD87429ABB4B61E6F4FBC89960C\"\r\nLast-Modified: Tue, 17 Mar 2026 08:05:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9518201836258854079\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: G/1P2HQpq7S2Hm9PvImWDA==\r\nx-oss-server-time: 21\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5045,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"1bfd4fd87429abb4b61e6f4fbc89960c","sha1":"60ca7ed873fd6fd0e5b91c50c58d857298fa119a","sha256":"8dc1d16fd64eb00ec4f66d6a8ffcc31aec7d6122864542682c148f41cfc9b0d4","sha512":"e49ae699c2c9fcaf77b0765e44cb8ce37395de62c0f3e6f029acd82f9e2b26be81b610ffc35d173d49ec25aefa463c2bb5b60570edc1ffd1a985fd2f76ce61d7","ssdeep":"96:5ZkBeZKgdqFCIXbLOYk2j80G3TED5Vieomo3E6lEcclN/fRM0796uFBPVmPckY:5a0ZKgqCcLOYk2j80kTEDKeAE6GcMNHT","tlshash":"d8a18ef71ac7c9a2d670db78630dc3cae0c95313ee3ac9245080a5f5733005ed2a25a6","first_seen":"2026-03-23T14:49:32.994672Z","last_seen":"2026-03-26T14:42:44.137419Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1186,"timings":{"blocked":957,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimgd8c95b833ec44b43a335e0b688bc7ce6.jpg","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimgd8c95b833ec44b43a335e0b688bc7ce6.jpg HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66052\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5ECD39725B3E193427\r\nAccept-Ranges: bytes\r\nETag: \"7B55961C7C77F36683527153D17A4498\"\r\nLast-Modified: Tue, 17 Mar 2026 08:06:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10559830061503647999\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: e1WWHHx382aDUnFT0XpEmA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":66052,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2021:05:08 11:06:11], baseline, precision 8, 300x331, components 3","md5":"7b55961c7c77f36683527153d17a4498","sha1":"f0536e9ef7d5f9d8ffbe14b73197a04e78abc496","sha256":"f4aaf51c11d9ae99c0acd944a2ce1d08d39ca19d4472fda2be5e16b909bdc8a0","sha512":"86fc4a9cde2f3719c667c90c2f7e25377af4bed8fcaca11ebb8db9544b318106e50f452e1bbb2eb126a6a4b079842e85faa9e82b11c2855a724dead3293f0e8f","ssdeep":"1536:J0/Xwa0/XwwN9687HtG5AWwEQFfxB22lGIq9qWy+stOqmn:JKXwaKXwYw8JS9QFfxB28GIqsWOmn","tlshash":"2853e1315e516f32ecc89bb830a1dee942138ae9e1a3da1e745c388b7f615d09e17245","first_seen":"2026-03-23T14:49:33.032788Z","last_seen":"2026-03-26T14:42:44.126866Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1199,"timings":{"blocked":955,"dns":0,"connect":0,"send":0,"wait":217,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg8183bc1d39304aa7be08ab97f8496801.jpg","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg8183bc1d39304aa7be08ab97f8496801.jpg HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7655\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5EF53B5CE215CCB170\r\nAccept-Ranges: bytes\r\nETag: \"53CFBA8C9099F9B25DDEACEB108F486A\"\r\nLast-Modified: Tue, 17 Mar 2026 08:06:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11968720809050442574\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: U8+6jJCZ+bJd3qzrEI9Iag==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7655,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 276x183, components 3","md5":"53cfba8c9099f9b25ddeaceb108f486a","sha1":"d48a0c19ca670309b659dacffa08fde0b3b510a4","sha256":"4dbc582c04ae3a969c45df3688bc493f5f11b5ca4c7bdcb7c02f03bbbba87d80","sha512":"557ccae13d7d096538fe200eca374077eeac51c53b2869416dff98234014daa3dd239d093a02ea0f287b61dc634ec6255d5f9bdaa895cd2b24bfcd85caf494de","ssdeep":"192:778mbcaR/r0w36dyVAgAc2kslbzjFZ5A0gLznIFjNo+mxz9EC:778mbcaRD0wKdtZPjFZuh/nscxz6C","tlshash":"0af19e428fae71c3d900e3f28408ac35c9b3a842697c9dd252f56532a27c0cea6ec674","first_seen":"2026-03-23T14:49:33.020097Z","last_seen":"2026-03-26T14:42:44.151986Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1352,"timings":{"blocked":1137,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: 1692c65ae83eb5d11774534493031\r\nContent-Length: 51\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":51,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"C\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 37741d3a4a8a02262b44022f6d3ffee3\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7361,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3662a2fcaed8af28160bcf9c72bce9a6","sha1":"23f8f3489c274b807a7ca5be8990ee495ff0b7ad","sha256":"ca5e441c5de4f1b1abc283a51aadb11999717fdbe40a92a835c8980254f2b126","sha512":"e0042facd10427867db604ae6a062934a2f6cdacaec7b981b93eb8949d828c7934ec8ccefcc5207dfaf7daed1ba7fab8f194238b1060ae3e1e77f0d037661f89","ssdeep":"96:SWksGN0VJ+KTr+KTNiiiq+3ElG8Z3x3ZK8YNMolT919sNtlQGuaj3zakpCBB:SWksGNyn+/8YNMoLs7l37pCv","tlshash":"1de1333c4fbc5114c4335eb56fa7bdd08c3236c21edd8ca6909938089991b7ca3657aa","first_seen":"2026-03-26T14:15:14.922392Z","last_seen":"2026-03-26T14:15:14.922392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":298,"dns":0,"connect":0,"send":0,"wait":325,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"118.25.42.241","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m3a9.nasdaqt.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 14:14:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Thu, 26 Mar 2026 15:14:55 GMT\r\ncache-control: max-age=3600\r\nset-cookie: __uni__uid=rBEQMWnFP18h69XwAzPkAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-15T04:11:07.92232Z","times_seen":20236,"resource_available":false,"data":null}},"time_used":2973,"timings":{"blocked":1347,"dns":56,"connect":527,"send":0,"wait":277,"receive":0,"ssl":762},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/user/getInfo","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/user/getInfo HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: \r\nlanguage: \r\nContent-Type: application/json\r\nContent-Length: 0\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:51 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 89f1fe071460129598fc12a6c75ab6b9\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2b861c2a9d06ebd69d2bf2a7d095f423","sha1":"76204c69177f70c6219e8fa6a2062293d77a9095","sha256":"58d1aba898a785aa2d549265f902b330d3fedc27012d5547ac23317700b8aba3","sha512":"269c37eb7ed80372a5a2541a0194903437d6dbcdbb7e8bf6d210b54c24f5d22bb57a64c685ea17272ab33316e82a8e25016daabebf1896ee2fc774b112e83a75","ssdeep":"","tlshash":"6b9002251918f0d3219961e904980506107594f227a802d04c5c09651454155558b444","first_seen":"2026-03-09T14:06:13.794141Z","last_seen":"2026-07-18T23:25:11.688416Z","times_seen":19,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/537.d19bcea5.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/js/537.d19bcea5.js HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:51 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 5860\r\nConnection: keep-alive\r\nAge: 5380\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nEtag: W/\"69c4ce6e-7fbd\"\r\nExpires: Fri, 27 Mar 2026 01:08:55 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: b5db5d9d938f59bdc6858df14ffae234\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32701,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32450), with no line terminators","md5":"960802eee5d2fa7fdb7d98b7985ec08f","sha1":"0b9790de2730c9fa0a5130f276bfa3ac55353fe8","sha256":"2af652c370f7ae5f725b2efc663c4e37f7d7da49b6cfb8e82e03261f8e65a06c","sha512":"c75d28b038b31754676d571c93ac42255236fc4b9a4adc36e7289ad16f57c06dd8a6c06d1287fb2459f875483595a8fa2c0df5ba8d25337828d9d5c667d7b450","ssdeep":"768:r9N/iP2tocs3sVsVs7sTsBsdsbstsenA5tdl/zH0JtqvO/C2:Likocs3sVsVs7sTsBsdsbstsenA5tdlu","tlshash":"0ae24128759aabfe179235283cf70426753a0f6159cd50017bf6e2e7b4b108b293bb5c","first_seen":"2026-03-09T14:06:13.80398Z","last_seen":"2026-07-18T23:25:11.723431Z","times_seen":28,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":365,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg1f8ad479e6274797a4fc0a5c7b6d18fc.jpg","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:52.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg1f8ad479e6274797a4fc0a5c7b6d18fc.jpg HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9510\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5DDA25D33247F06ADB\r\nAccept-Ranges: bytes\r\nETag: \"4E9194FDA1B5E8BEBEA49128EC04E8B1\"\r\nLast-Modified: Tue, 17 Mar 2026 07:33:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2760481375503433073\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TpGU/aG16L6+pJEo7ATosQ==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4e9194fda1b5e8bebea49128ec04e8b1","sha1":"20d6d458f4624654da8e89935351ce207c72dcc6","sha256":"2298ec484eee16bdcdb015a5b1697eeade067f6c56dc544726eb5dd7509f3318","sha512":"a203c4bd32464717fdb8abf6cf5a6b634ad31f1ac7c7d8df2dfd8b236f18610b6010e3c837c55b070026d6094026d26aabf8fe958fd56078819fa10a8196fff3","ssdeep":"192:pWxcEVQCvmBsEZFy5QyxlnUdPLNIcDR1kLAxyu:pWxR6CvJsFWjlyTic11kLAcu","tlshash":"21128e14ee741203f111a5790f1f65e891dc2d12dcdba6ea7e2003de2a2b668f591263","first_seen":"2026-03-23T14:49:32.99369Z","last_seen":"2026-03-26T14:42:44.106311Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1716,"timings":{"blocked":748,"dns":643,"connect":23,"send":0,"wait":216,"receive":1,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: c90c889f0cb314601774534493043\r\nContent-Length: 0\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 0c27946f0a69c3708006ee25e2ce35f2\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":564,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cf4765c382a554cfc02805e8949b642d","sha1":"4d798d54ed29bb0fbca1b10a87176ad10a622fed","sha256":"e4a82da02921199bb528f374ef8edaea5686825de36293d8571251fbb6fc850a","sha512":"e23a6db56b06c1c533ffa814f52a316f6336e94b84ff932be5361920ae699cf05843335d661abf45b69b23a05d2aba5a2c889b6c88e022992fcf268abc6df201","ssdeep":"","tlshash":"5df08b0f0638deac080584c755c8fdc8924f2647c620dd709baacf6c80f15bb0a0b504","first_seen":"2026-03-23T14:49:32.981293Z","last_seen":"2026-03-26T14:42:44.109788Z","times_seen":7,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":600,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/chunk-vendors.35ee6864.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:49.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/js/chunk-vendors.35ee6864.js HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m3a9.nasdaqt.vip/\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 476005\r\nConnection: keep-alive\r\nAge: 5381\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nEtag: W/\"69c4ce6e-184f07\"\r\nExpires: Fri, 27 Mar 2026 01:08:52 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: 82ade58a9660a70ec050cda776761496\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1593095,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35339)","md5":"a1575b96a95710692c07b976c401cbe8","sha1":"debb7cd4470528217b7f95348f2d0d0bdb95c27c","sha256":"0767a19a69453656028775b0087991840bf2d78b6c42b95d5f3b708624d70301","sha512":"0d903ff8b34986c7964235fe0823cac2a80845cb416f86ee2e1d94317291a1904db2245d4d5a91d99600579bd0b2de0053adad71b5d83795cf5667ef97cc9da6","ssdeep":"12288:b4LGJ6NH31e4meSGFJNA9InjT3ta175cnduhaz/V1zOuc/M:+GA31lRHNnVa175cduhazTzOp0","tlshash":"78252b88b291b07247eb20b1503f210bf23a6958740b84a8f679e4e57d7d98d527bf7c","first_seen":"2026-03-23T14:49:32.998155Z","last_seen":"2026-03-26T14:42:44.110592Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1547,"timings":{"blocked":307,"dns":1,"connect":154,"send":0,"wait":302,"receive":620,"ssl":161},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/index.344d28b0.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:49.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/js/index.344d28b0.js HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m3a9.nasdaqt.vip/\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 402112\r\nConnection: keep-alive\r\nAge: 6340\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nEtag: W/\"69c4ce6e-15ef1c\"\r\nExpires: Fri, 27 Mar 2026 00:42:18 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: dd16e7bd1f98d583e55236e8bc4d373c\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1437468,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65264), with no line terminators","md5":"9a8c720cd744bbe682074d825ccb0fc5","sha1":"ba8437858ea6c5f49f9f449fe3ba1ed284ec5c08","sha256":"deb913e8a9c94662dee84f0a3016871c75402e3f2fea893b199294cde68f6d81","sha512":"c546b794880df9333b8f9e3a6753b178727c6af5bc8a4fd955b6028ebdaf035bc862b14a02254a6333c9520ade84a6528cca7ceda052d0e890d5e4571f6a7868","ssdeep":"24576:a+vUZIwb1XAckND63/yx50rveB0xTzTXzmDjUQJVi0jMXFkID9Q+hs9gwcqZv09o:a+vejmDjUQJVi0jMXRQ+hs9gwcqZv09o","tlshash":"63453b4b4edd6fb606e637e3b0893f3560bc09a293d158ef46f6c98a8389b149347135","first_seen":"2026-03-26T13:09:25.039702Z","last_seen":"2026-03-26T14:42:44.147643Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1508,"timings":{"blocked":309,"dns":1,"connect":152,"send":0,"wait":300,"receive":583,"ssl":161},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/691.06d1e32e.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/js/691.06d1e32e.js HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:51 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 45349\r\nConnection: keep-alive\r\nAge: 5661\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nEtag: W/\"69c4ce6e-606f1\"\r\nExpires: Fri, 27 Mar 2026 00:42:20 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: fcf8e06eac3820eb9b0b4380512911f2\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394993,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65174), with no line terminators","md5":"76797fdf8ec89053d37c33950c542b63","sha1":"9fc11de5ca705b3c19f418cf59e9ae465aa3e515","sha256":"c81df67694820e965bd7e34ce173bb6836192f869a05713edc517f93757c227d","sha512":"084f532bc81ee74b3897e6fd8aedf6b4798fcd68262934acaca589957a550c685f79577c81b90c4d4a6666dda680420c8d96e2835f0ecb151c0756af855fb44c","ssdeep":"12288:E9aUiJqEvIMz1XGqsdXLu2I4QjvXrcOW3O+rCoBVV200L35OAMy0xGd2065ekDYf:E9aUiJqEvIMz1XGqsdXLu2I4QjvXrcOD","tlshash":"d284cf9e9895124996234aa387dd5e944b3cdba351720cee3352284f8f43fad33de217","first_seen":"2026-03-26T13:09:24.969262Z","last_seen":"2026-03-26T14:42:44.103411Z","times_seen":3,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/4373.6e313002.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/js/4373.6e313002.js HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:51 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 8322\r\nConnection: keep-alive\r\nAge: 5380\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nEtag: W/\"69c4ce6e-15b10\"\r\nExpires: Fri, 27 Mar 2026 01:08:55 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: 35452c62650e46ec61e36f96e0277de2\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88848,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fc3230c8c205ae59f3f62dc51b6b872a","sha1":"97015fbc16fbcdf2f8a27e9c0f1b16e90e0141c7","sha256":"84a8af8cb616902def23d928810a68231ee5808a2909c18ea8367daa80ea8c75","sha512":"63c634ed7127edebe1989fa2a9195e4911115ad14de98914876221e36870745b21203a90bcbbacf3e104dfaaa2931feb7aa3d5d46ef2bdc2a5f00b6573bb5474","ssdeep":"1536:de6uNX3fdywwaaleMf22yMI7caS3uKjO8dFxqEUbXVSgs+4Ng:O7caS3uKjO8dFxqEUbXVSgs+4Ng","tlshash":"9093ae9a68a1524985235b6287cd9ea44b3cd76318b20cde73922c0b8f43bdd33de757","first_seen":"2026-03-09T14:06:13.810198Z","last_seen":"2026-07-18T23:25:11.755706Z","times_seen":19,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":302,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/common/getAllSetting","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: \r\nlanguage: \r\nContent-Type: application/json\r\nContent-Length: 0\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:51 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 40663db4d084a58f4bfdaa928fd77e69\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15469,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (14932), with no line terminators","md5":"f60ff99ec2f54ae60a4fc8fd132e986e","sha1":"3ff25cc4ab30637386311c297425646f0b122b9d","sha256":"937befc276d3cedd03a55166623603e9454357134b80b5855e8cda1701eddc06","sha512":"2591371114d728fb66a68f4607262fbed56c8cbc5eb0ee8636750a2647754c41b860aa2e7b26cf68fb4878fd445a1da79a99924dd0ee1fe8d73b3c85c3e3ffa1","ssdeep":"192:kXRoJ8LvS6+IqfteYVh/Ku4SNBB/ipi6YsyJjj5D15RRzr2sIismqMKsYAfSN3jE:86DRDPJH2IVZfSAYYBoQ","tlshash":"ee62740e37c8cc7e67d655d25097f698b78d345be889e84ce375aedc88987b9840f408","first_seen":"2026-03-26T13:09:24.989481Z","last_seen":"2026-03-26T14:42:44.152698Z","times_seen":3,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/tabbar/tab01_act.png","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/tabbar/tab01_act.png HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 685\r\nConnection: keep-alive\r\nAge: 275469\r\nCache-Control: max-age=2592000\r\nEtag: \"69c10133-2ad\"\r\nExpires: Wed, 22 Apr 2026 09:43:40 GMT\r\nLast-Modified: Mon, 23 Mar 2026 09:00:35 GMT\r\nServer: ****\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: b9c430da41bf64c438594aee87550269\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"7d0fa4ebf4c5065c54466bfd9d675163","sha1":"820c9a39997d217c005344c0b9ba355b109169bb","sha256":"c69549d69d23edee85ebacf27c4ae093c16ac8b62514cf0c15fc95158e1227ec","sha512":"1c8921a47606672c0d7b347cdf9ef67905380616b7ef3ab033d6c8ed6f56e1715733c859eb0c807f9723148dfad9835fecd936c3f82d433d471dc8e304dcc75b","ssdeep":"","tlshash":"9d0188ceb214592413b82c1b64444585d95b11d30f1fe948a9c74efc7d019dde49cf40","first_seen":"2026-03-09T14:06:13.786032Z","last_seen":"2026-07-18T23:25:11.715937Z","times_seen":28,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":460,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T14:14:45.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:49 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69c4ce6e-10cb\"\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nSet-Cookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; Expires=1774541686; Path=/; Secure; HttpOnly\nbc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34; Domain=m3a9.nasdaqt.vip; Path=/; Secure; SameSite=None\r\nX-Request-Id: cf647373103dee69f9dcfa91e4a1a3c0\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4389,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (542), with CRLF, LF line terminators","md5":"840fe8845b32914cf5921fee6462fa1e","sha1":"ffdfb759aab9388fcaeb40ebadf79bd421d78b2a","sha256":"d2e3c9f1a24a43bfbb923dd3c4cebad8430ba5037acf3320ec734dfae6bd8a85","sha512":"0772aa35a71ff6d0604144263b006fa1ffbaaed967e8aac132f1957fa735bd0331c92d6bd0eafd264ecabe788be8df6274c04cff70c008a30c0b0f9169f2caf6","ssdeep":"96:NTVbuvZl3LE3fO3ukb746k9QpLb7i7aU/LBTQVtyZx7Ju:5aZaabLkGNb7i7v/LBTQ6bJu","tlshash":"9e91c2a3ca10dc09a3709335a9faf0198275c061d7696cbcb48c54ee4ae0fd989f7776","first_seen":"2026-03-26T13:09:24.980065Z","last_seen":"2026-03-26T14:42:44.155942Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4605,"timings":{"blocked":776,"dns":454,"connect":152,"send":0,"wait":3053,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/home/cooperative4.png","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/home/cooperative4.png HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 48773\r\nConnection: keep-alive\r\nAge: 275471\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nEtag: W/\"69c39777-ca70\"\r\nExpires: Fri, 24 Apr 2026 16:04:18 GMT\r\nLast-Modified: Wed, 25 Mar 2026 08:06:15 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: 069ebd3ed5bc20cb5b8710f3d6523cb7\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51824,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 590 x 646, 8-bit/color RGBA, non-interlaced","md5":"d20fd885fdcd615049fee0adcf14090e","sha1":"9f4833c274ba60a4fd2cbd1d63e13298a8567432","sha256":"ebeb8d5781bc11fe06fc0e9c76c46ef8bc06518b5b1e12eae5fe949dc8d9a95a","sha512":"c59379a7077df2f5c8be1e200ef05486cbe9d822aa3fdd4ceb48569aa3339e890896059f2f8bda28f28ceeef0e09ca95efa5104f9ac6e7f780a391161a66238d","ssdeep":"768:KgRM9BZBO/62djTyKLYR/876HHt/zb/FVO5RbNXwP/sObAsSBp6tk6Lw19EYn:HmpQ7XFK87m9zhV6gDcsSx6LAn","tlshash":"c833cf82c5fce90a481745b392ed0e6e7143c97a36cc3425db1816ecce8deae497a785","first_seen":"2026-03-23T14:49:33.030846Z","last_seen":"2026-03-26T14:42:44.147064Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":916,"dns":0,"connect":0,"send":0,"wait":162,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: ed62c2730fe4f2611774534493029\r\nContent-Length: 53\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":53,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"AHD\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 279b1b51316b8fe72cf45882a7c5e95f\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7666,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ed0bcf55fc267bd1c2006a5f5390f237","sha1":"324f86ce44f9be97aa511e432125d24cee4fdd79","sha256":"425cd5ab148efe47ebda61cc552b26ec9d8aafa9f4a4b39fb195178acc84ec5e","sha512":"b229330b36311ca5b6bd064fc3485cac2e47fdd0279d031103a175b4d0cd12c904bbd776d03ebae1d4b2d7c6cb48fd3167e9b9568c74c65629cd87935e26237b","ssdeep":"96:XREvfenZQQn8NkBy56R+lF9VqhW8Df/Y+m1dNX2gpbpFF:+2ZQY8NkI5ps1Tlm1d0gpbLF","tlshash":"65f1febd8bdaa008c7346c867f93fda09516b3d35bdeacd287a82f0d4951e3891507d2","first_seen":"2026-03-26T14:15:14.936552Z","last_seen":"2026-03-26T14:15:14.936552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":298,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: b95c41ce781c06411774534493032\r\nContent-Length: 51\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":51,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"W\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: d4ddd289f511287594a6cc2705ebc813\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7226,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c10c850b715c283685406a75b62bc3bf","sha1":"cdf1620ded59002a06d60b09dade882e78fb4cc0","sha256":"1822d0514c34f87f85c0cd6fddefdc899b03dc7a73c844b6c33973986ac285cc","sha512":"f9eb22cf726d8a097f921b6a02e4d650b5d06334462e50830b0876b57c18bf90464bc741890aa881c83113005d0232371f54ddafe29a19bf29cf0fd16356b824","ssdeep":"96:BZNT76J6dw6+Jt/3W75Y1Brtg4fgUgNuSoCFAdoVlpQ2OF8/csLoKbK4KOZYjaAY:ffnIClpQS/cdOrlnz8JJnz8Jn","tlshash":"c0e140bdbfcc80c5e4389d866fd7beac881632c30bdddcd315a99a085950671d604bd6","first_seen":"2026-03-26T13:09:25.015129Z","last_seen":"2026-03-26T14:42:44.134238Z","times_seen":3,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":435,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimgf1ac8c9b36354526a20919a6f40b834e.png","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimgf1ac8c9b36354526a20919a6f40b834e.png HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 418569\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5ECC39EA922A0F1509\r\nAccept-Ranges: bytes\r\nETag: \"D5D5CB5ACD644801CFC0DBA264107878\"\r\nLast-Modified: Tue, 17 Mar 2026 08:06:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5398161268152217570\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1dXLWs1kSAHPwNuiZBB4eA==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":418569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 512, 8-bit/color RGB, non-interlaced","md5":"d5d5cb5acd644801cfc0dba264107878","sha1":"d2b02d2612c7eded43388a57a09fdb588d473039","sha256":"830edbdc909dcaab8d2d83fb7890612b639f1e94927f1315d1c276ded15b321b","sha512":"f9bab9b3adb54398131661a9126563f299e9aabb4695e8fce50badd4bd0f5977ab9c557d74322d96e113c6302eacbb40a3c6189cc4063f1da0c21d1f6625b74b","ssdeep":"12288:8QQBNrQ0LqT8wwCxfTmVxOYR7hEdJ8hAA:8B1Q0mNxfTmjO07GGh","tlshash":"639423da92fd1a080cc2fbbe56896943246032f0de0b967431095dcdfebdd075a6eb91","first_seen":"2026-03-23T14:49:32.975825Z","last_seen":"2026-03-26T14:42:44.107291Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1422,"timings":{"blocked":1136,"dns":0,"connect":0,"send":0,"wait":214,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: 47f8e2679908e5021774534493023\r\nContent-Length: 52\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":52,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"CL\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: b4c61aba32291f3eaae7a19ada206138\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7204,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3a7b978d6fc5a5ac9c9c43a5f94aa2fc","sha1":"1453017de5d046f6ca7740494e539fd1a9661fd9","sha256":"08dfd4201c1335d073ec7798f04d1e1d02a943f664b5c8d33011e2202f76d2eb","sha512":"315aa8066f38602b8086bd19acae258a5fa842f4ee97d5743c43bd87714d57ffa0dc64570157e4373c3b8fe83a134b12891428efd20640c3a6bf77b8fe643da3","ssdeep":"96:otMLBpWOOWwx8ZFwDOdjEhdKnCrMGiZgsXHpq91nJm:QkBp+Wwx8ZFpehdKnCrWXw9a","tlshash":"61e1c8bccb899284c4709d926fb7bda1999731e74edf8dd199982c3809b0333a115fc6","first_seen":"2026-03-26T14:15:14.938946Z","last_seen":"2026-03-26T14:15:14.938946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/common/getCoinList","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: \r\nlanguage: \r\nContent-Type: application/json\r\nContent-Length: 0\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:51 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 6129312b4b95b25260275718e9725283\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23782,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (23672), with no line terminators","md5":"5ce753b31e3856a275dd2f59dc1b04e4","sha1":"ef0598440522e57bc3d0e1d12399f7f9f2ace5ae","sha256":"468bc556941dcfe368453f55607c84bf312e566e45c89a3515fbd2401ebb9c74","sha512":"e4776ffe9208a591f30ec88c3155edc59f3329fbc24f59ae78acb5964d061e3d7a6063f3bc4385c35093b5c52208a6ce080f97e39e37ca0849c8e5412b2a1933","ssdeep":"192:BX4TX+l+Xr8XTdXKBmMXVMoXXYXDKRMTm3ZBiI3OVQoX83BWetWhyKHKsX3juoVX:xSIR8d+OpWCc","tlshash":"66b2514a562898adc53ed0d12fafbe16609d327fe8c5cd1ed3d90d888dd8ab4150bf02","first_seen":"2026-03-26T14:15:14.940011Z","last_seen":"2026-03-26T14:15:14.940011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimge4e4858c2f014973a971a89cfa26390a.png","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:52.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimge4e4858c2f014973a971a89cfa26390a.png HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 864\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5D13F9D44553FE06C4\r\nAccept-Ranges: bytes\r\nETag: \"8022183D2A3A8B4B36E0710963A93CC5\"\r\nLast-Modified: Sun, 30 Nov 2025 12:00:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13801209892128293464\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gCIYPSo6i0s24HEJY6k8xQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 68, 8-bit/color RGBA, non-interlaced","md5":"8022183d2a3a8b4b36e0710963a93cc5","sha1":"2a1fbe99f45b25aba73a9ec9fccecddb2fafc8a6","sha256":"ed973a886579949314c9463485d09aab6b7cd137f701b4def49adf2a52154497","sha512":"59e1c34ad017161a55c8a39b40234baaf50aeeb0df516cd012f2ebddccd79829599f165c30b3466ec8c177a058a8ea6723744467ecfc0eb5da8e3b4b244b0709","ssdeep":"","tlshash":"c311d68d0b40dceedfb68ee3152700b78834040f00eeaa80ca1e34ba919a142706b3cf","first_seen":"2026-03-09T14:06:13.799925Z","last_seen":"2026-07-18T23:25:11.691731Z","times_seen":19,"resource_available":false,"data":null}},"time_used":2218,"timings":{"blocked":1003,"dns":877,"connect":23,"send":0,"wait":212,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg8355eb98cf304cd2aa0c6d1906ad71a5.jpg","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:52.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg8355eb98cf304cd2aa0c6d1906ad71a5.jpg HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7151\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5D33781B7EFB658606\r\nAccept-Ranges: bytes\r\nETag: \"687182944185735464D2C7D32FE115CE\"\r\nLast-Modified: Tue, 17 Mar 2026 07:32:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12494243715775156149\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: aHGClEGFc1Rk0sfTL+EVzg==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7151,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 259x195, components 3","md5":"687182944185735464d2c7d32fe115ce","sha1":"0eb89a2511014d5cde2b368df85b9848b95c1e7e","sha256":"31ae9e611fb888dcdcdbbf9965aa88056eebfd6adfe4ded0d0d9569c4b983563","sha512":"a6996852c6188c48ac3ccf9927364c13e2f81d42b73dcb6a84ae1d11db7c10f224b277e22aa9a27af0ae70748e6c78c3a001ca01d873510d3d93330f02656159","ssdeep":"192:chR223qQE5e4xvff4+Da7i3BA05rbqZbt2a0J5W:cT74xHACaa5HahsJc","tlshash":"3ee190a028b14451cb598efa24c182dec55c6167adf374eb843b211cf231e148dfb2f6","first_seen":"2026-03-23T14:49:33.028392Z","last_seen":"2026-03-26T14:42:44.126238Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1747,"timings":{"blocked":765,"dns":644,"connect":23,"send":0,"wait":215,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg6fbaf17d59e345398ce0c01ac934fbcd.jpg","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:52.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg6fbaf17d59e345398ce0c01ac934fbcd.jpg HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11428\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5D72F0669DB5DFF8F6\r\nAccept-Ranges: bytes\r\nETag: \"917BE9EBAA2DCA7F6148B2C53431D05C\"\r\nLast-Modified: Tue, 17 Mar 2026 08:01:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13289548145879957717\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kXvp66otyn9hSLLFNDHQXA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":11428,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3","md5":"917be9ebaa2dca7f6148b2c53431d05c","sha1":"6d247ec2605354fd08dcd574d07cda8a73892e97","sha256":"27db97df8de135ba010e2bde2890d649178114bf7414c4146d9af7df1fe745a9","sha512":"7da5e001575138ee3a4234293d00194f5344e546ee93b6c3fbbfbba3578f79c41e3b6ed466b4e1a33e025aaf0a3ec8174de6c2c1ca9469869d3bd0b11daad8bf","ssdeep":"192:FL5wEXz0KzUSnHpJ4U32nocUPFXkbnHc1fWVQ/G4leLBAEuU7MlUmU10wxkqw90:B5vjrpnHl2vc1fWVqYKEeUmUCwvwK","tlshash":"5832bf45f38485efea42adf38319b478d116fb036f7240b952f053a54362c86b339968","first_seen":"2026-03-23T14:49:32.984678Z","last_seen":"2026-03-26T14:42:44.098668Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1688,"timings":{"blocked":736,"dns":640,"connect":24,"send":0,"wait":212,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: 1c9666e89d3fb4b01774534493033\r\nContent-Length: 52\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":52,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"BO\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: d0b64a49943d6441211859ec87eb5556\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7210,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4104ac158a4519e7cc2c5f75a6115c7d","sha1":"67ec09797a409b0fb6a7c298423a94c11e3e9728","sha256":"d550dc5691552ec566215156ee24cc385db939bf1d50317bb2a521a5f3697e18","sha512":"49a0942d59ae11788b17fcb62c35ebc431143787b5733de9068d709371f04e527c6257757eb8e455e8b1616d9c4d1d584260c21d76a27161bc6c52faa54686b3","ssdeep":"96:T+VJmBxom6BofH1ZC+7AIW2w3id0NEvIOuuU8AtYqeHoxAtoU2Ga17IuVL8JDbhG:sYbAVIUSQ","tlshash":"76e1a87c7b98905be975cdb2afd37db0862630c26ade4d8532ad684c1f58233a1307c6","first_seen":"2026-03-26T14:15:14.94291Z","last_seen":"2026-03-26T14:15:14.94291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":444,"dns":0,"connect":0,"send":0,"wait":312,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: 89bc119f7a5ddab21774534493034\r\nContent-Length: 51\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":51,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"S\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: fbef9b1e20a9dff1a50c657ac174c32a\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7817,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"decdd1961140e6da36381cb4cfd4eb60","sha1":"3bd1e0c26bf368f6209706efd29e0f4348d0c237","sha256":"363e7645e809c2fcea2d589ee5f71464c535108777115727c5493d1b0f3c356a","sha512":"aa811ff36cf3a8852c060b9f7431fba72caccc1d3e5f8f99e0527a9a4bfc3c41f79cd0ca25b8152903e2328551006b4caf5e15f45c2bc203097de7043c98b4cc","ssdeep":"192:oApz0bis9PHCFbinQySBmztK4BgK9tz0TBqnEzMDgFq6xoif:5z0bispHCFbinQySBmztK4BgK9tz0TB1","tlshash":"cff1a66c4fc6a925c4f14cd16f97bd80de1532e30effade20a986e0f2951334a16179a","first_seen":"2026-03-26T14:15:14.944083Z","last_seen":"2026-03-26T14:15:14.944083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":608,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg84745c1495304d0993bc6f76e5acfaf6.png","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg84745c1495304d0993bc6f76e5acfaf6.png HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8182\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5EDA25D33247F06BAE\r\nAccept-Ranges: bytes\r\nETag: \"BD7CFB659A80661FD795896A2D8C377B\"\r\nLast-Modified: Tue, 17 Mar 2026 08:02:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3397951483125742913\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vXz7ZZqAZh/XlYlqLYw3ew==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8182,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 252, 8-bit/color RGBA, non-interlaced","md5":"bd7cfb659a80661fd795896a2d8c377b","sha1":"c274240ade2bd7ed2f4b50bd07918d0524c441fa","sha256":"a3a985d4b59bae90ad98bcdb51ee73a6836964c722011c9652a9764c47695de2","sha512":"91b35450013df809cf2fac38cc012a21f6f17a07346fd829c580f670244d6098005c6ec81fb1ee273230c3be1d9462dd4a3f98e018ae2948cc1f6184c1f1b963","ssdeep":"192:GpwJnAWBV4YSR/VZGqkxC2skXehcVVs0TVUP5SV:tJnAWwjd8skXebYUP5SV","tlshash":"6ef19efeba70c48e6d4b8c6ac501ff07da57196db6af112dec6342884c58ef91442783","first_seen":"2026-03-23T14:49:32.986305Z","last_seen":"2026-03-26T14:42:44.136733Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1152,"timings":{"blocked":938,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/home/cooperative2.png","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/home/cooperative2.png HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 30340\r\nConnection: keep-alive\r\nAge: 275471\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nEtag: W/\"69c39777-778b\"\r\nExpires: Fri, 24 Apr 2026 16:05:03 GMT\r\nLast-Modified: Wed, 25 Mar 2026 08:06:15 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: d5d384577292d4a959ed92c506d8b7de\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 590 x 128, 8-bit/color RGBA, non-interlaced","md5":"0bb54d64064bcdefa8b75c0e33d676c9","sha1":"2bc62bddfecac254dbb367062f7a6f81677270f3","sha256":"55847d09991fae35608251f557bb4e382dfb1549e85a56a46d53b645b72479e4","sha512":"911fecc93942d68a774245c18118415f708445c0f954c2bb48e81d7a8dc70c07be373730f97db912f51255194432ba25201200b0419de14629540039ce06bc4a","ssdeep":"768:gEtfOkQkQO3Mfjv2XJK+Tr5mgQH8uX6Nq:1fz9Q1jvOXIgQH5gq","tlshash":"bad2df42a1c5775183b8b3f418d4b2c3a7ef8439d67bae4c680dd269bb5e2a90ec5c44","first_seen":"2026-03-09T14:06:13.838108Z","last_seen":"2026-07-18T23:25:11.737538Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":919,"dns":0,"connect":0,"send":0,"wait":160,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/tabbar/tab02.png","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/tabbar/tab02.png HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 844\r\nConnection: keep-alive\r\nAge: 275471\r\nCache-Control: max-age=2592000\r\nEtag: \"69c10133-34c\"\r\nExpires: Wed, 22 Apr 2026 09:43:40 GMT\r\nLast-Modified: Mon, 23 Mar 2026 09:00:35 GMT\r\nServer: ****\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: 46f8d5d6ff2dc3e7ece2b1306597025e\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"9f810b7ff2c631f96f6e2185f00dbc55","sha1":"efe293c3dca73910d07414ff6674926d3b713f5a","sha256":"fe147d05586154c00bcd62d302b45a2e3366f08567e2fb91e8fe50ca6b8dcd5d","sha512":"e169ae5c3c7082d7d135df4042930bc101ba182c945adf42e63eefc0b8734f938757f11d7d145274361e2df69f02406c93887185f3e06928f225e7df1a98ac50","ssdeep":"","tlshash":"1b0156f5f75415f95c5da4af556193ec745fe5518bb29344a802407c080fd8d4b4ce94","first_seen":"2026-03-09T14:06:13.798663Z","last_seen":"2026-07-18T23:25:11.683867Z","times_seen":28,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":473,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/platform/nasdaq/favicon.ico?1774505553737","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:52.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/platform/nasdaq/favicon.ico?1774505553737 HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:52 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAge: 817\r\nEtag: W/\"69c4ce6e-3aee\"\r\nExpires: Thu, 26 Mar 2026 14:48:04 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: bb2a121d10cc6c07c9e01afd9e6bcfcb\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"17ef4f619589fadb403181dfc3e1d2a5","sha1":"bbbcc7d856afe1b29c53118dd20e4aa6d1c6347e","sha256":"ed67a80237c876ac8555fd3fc985ab913da4a06aaa01f5cd430f4db531ecc558","sha512":"64ee35ea0873e33cdbee6a0321bde5b1deedd44924cb75e7232fa70afefb21a16b5939c65bab0949169fce6b851acdf6285a8f0e455b8ac0bdc6098589443da6","ssdeep":"48:jARbx2xXqyrmfxAUPErn/rnOb9S6n5b7XMaCBxKn7scL7ubHRSmo:jkwxaxJ/e/rc9SAl7XMaCBxK7CxS7","tlshash":"7b62ca10f940a4d0c49da1394d5bd2be56f87c2d8d4717432159bbbe293226f9e3dacc","first_seen":"2026-03-23T14:49:33.026981Z","last_seen":"2026-06-03T22:21:14.107676Z","times_seen":11,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/platform/nasdaq/logo2.png","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:52.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/platform/nasdaq/logo2.png HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 18098\r\nConnection: keep-alive\r\nAge: 275469\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nEtag: W/\"69c39777-4696\"\r\nExpires: Fri, 24 Apr 2026 16:23:31 GMT\r\nLast-Modified: Wed, 25 Mar 2026 08:06:15 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: 419f25113cf43688b91a3e381529cc7a\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18070,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 306 x 88, 8-bit/color RGBA, non-interlaced","md5":"a86a3ee46393b5ca9c9ed5c0f8c9eb3d","sha1":"e8e997913f02db940f26031d57afc517688f9b0d","sha256":"60fc094ecc03db2bcbb1c7c9b65cafd3028e082f8b684abc6793986981b64a7c","sha512":"282c16cc063190df3c28f34ccf922c598f82fd8e7ba3f05d2a40cdd7df1e1c57c2dc967ee486a4644cdbc7c596e5b05d3aee3106ba48777f47180dac03be1fd3","ssdeep":"384:iR7QxoR1hINmgLcF5I8tMCgy4MoUEtkalKhZ7UJ:4AmgYF5I8pKz6P4J","tlshash":"5d82d10b778815eae506c26d990ce13e191c0f692f98db8f2d6688b8c7b4c94d5313de","first_seen":"2026-03-23T14:49:33.007341Z","last_seen":"2026-03-26T14:42:44.104838Z","times_seen":7,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/home/ai3.png","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:52.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/home/ai3.png HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 4366\r\nConnection: keep-alive\r\nAge: 275469\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nEtag: W/\"69c39777-10f2\"\r\nExpires: Fri, 24 Apr 2026 13:43:13 GMT\r\nLast-Modified: Wed, 25 Mar 2026 08:06:15 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: fc791f9b640301029ab9f6fa698fd7fd\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 60, 8-bit/color RGBA, non-interlaced","md5":"03579d09c52c29d995da630608d67918","sha1":"7a6831aaf109c58057e6e373aadb044d83fb58bd","sha256":"3aa7a17a0e6065dc651c805044e72b2bfaaa02143754945a5ccfc187f56d3793","sha512":"495d5541aa720dab6ba90eba423edd317c453ed64b9b924e7c4d53a1c279ad8f026ec3dea9a1bf6eeb9177a3b831521a612319839d6c723921c67704f0e3af53","ssdeep":"96:SqzLKdh3YpuS3KxBG0R1nTIdAGWxSYqinS2O31c9Ml:SCLeypT3K3HxcWEYqV2A1cWl","tlshash":"b1918d82763655230104d5eaada8ad05736db68b3ddd8ee8b6f0328b5494342e32cfd8","first_seen":"2026-03-09T14:06:13.767925Z","last_seen":"2026-07-18T23:25:11.742988Z","times_seen":19,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg9c6007b31f0243dd94c3f94c6a5532af.png","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:52.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg9c6007b31f0243dd94c3f94c6a5532af.png HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1514\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5D33781B7EFB658608\r\nAccept-Ranges: bytes\r\nETag: \"FACFD63458EE3B4F01455E3EF72EA2B6\"\r\nLast-Modified: Sun, 30 Nov 2025 12:24:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12896825653610467044\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: +s/WNFjuO08BRV4+9y6itg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 68, 8-bit/color RGBA, non-interlaced","md5":"facfd63458ee3b4f01455e3ef72ea2b6","sha1":"9e7153e1bbebd1ccf8d3e2b1f1ea9f67ca759ee3","sha256":"aeba700620965b73526c13267f25b28b2e8874e1c7a0a003faef7a2a4047a509","sha512":"f132a2aa17868ed56ecda09c7e89ca8ce4eceba5d2379852a1a7291b3f23a20c2abee8278c642fa48f12a00e56e53df2fe18924a8fe9b1677008a0eac1392a70","ssdeep":"","tlshash":"3431fc971925600d0af2613e3b654f3015f742510f24bd21e958614354c8fbc5eeddc7","first_seen":"2026-03-23T14:49:33.001309Z","last_seen":"2026-03-26T14:42:44.100295Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2208,"timings":{"blocked":1001,"dns":875,"connect":23,"send":0,"wait":206,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimgd258f8f474e94154b4569add0f5a9f9a.jpg","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimgd258f8f474e94154b4569add0f5a9f9a.jpg HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3130\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5E048FEFE3A3C19B61\r\nAccept-Ranges: bytes\r\nETag: \"5FC7FC84672C31F468890A7AFDDABA40\"\r\nLast-Modified: Tue, 17 Mar 2026 08:02:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 859305807597092044\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: X8f8hGcsMfRoiQp6/dq6QA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3130,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 204x204, components 3","md5":"5fc7fc84672c31f468890a7afddaba40","sha1":"afecaeabb54f4c796d0ce4e073494339f636880c","sha256":"32b139534b63d0bc2cd7a44a4999332984f2e38f28275de645221fdf601c71c7","sha512":"c2c6217c78d35480707bc1266f285bfcf5c86ec62ca7ccf6950af66de27a1ac93d9c846c328fde237033971c119f6115942416b3c33b4495c6950a51400c3867","ssdeep":"","tlshash":"38511b5da7802c67ed298236e51d9a2c2bf68189fd3cdf15126090926b4dde23c0ac81","first_seen":"2026-03-23T14:49:33.019113Z","last_seen":"2026-03-26T14:42:44.145805Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":939,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg5fa6d46f0d7a43bbb8b2e2067ee7fdb2.jpg","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg5fa6d46f0d7a43bbb8b2e2067ee7fdb2.jpg HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6772\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5ECD39725B3E1934D5\r\nAccept-Ranges: bytes\r\nETag: \"F26BCACCBA9D5C6DACD27592DA888481\"\r\nLast-Modified: Tue, 17 Mar 2026 08:07:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10731362829139802849\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8mvKzLqdXG2s0nWS2oiEgQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6772,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x168, components 3","md5":"f26bcaccba9d5c6dacd27592da888481","sha1":"16b65968a6d9113f6abf9147603b311c311b3933","sha256":"5d1a0094e7254e492a0ae0c300f03f7f9ec87393532f6f322914b44fd43df3b5","sha512":"dccc3c6ebc0125ae824b4d726b55fc42edc08fe16d9d4758d1cffbfa7ec92d2d458dc827a11eb0c5ebfc5a694a4c746039294999795a9cf463074ed02b8a8d6d","ssdeep":"192:fTszw7jqc3F1v0lVCF6H1O4UCrNRuTqaI:fTnFF+G6HI4r1H","tlshash":"94d19ed93f246f81c554d8e2c414527df3e905f36e2acf5692f4d521daac1d3c42aa03","first_seen":"2026-03-23T14:49:33.021141Z","last_seen":"2026-03-26T14:42:44.13952Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1368,"timings":{"blocked":1148,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: b3b0f846ce932a3b1774534493025\r\nContent-Length: 54\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":54,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"DJIA\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 26564c4e5743912acdc073ec9e2e0827\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7033,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"79675ee3f663b54d516434f82aa3d971","sha1":"eaa518fb2aac423bcaff8c522324a6d799ecdcea","sha256":"3fbf247f5278387b72657cb39594554218f7d426dcf1161d2459815f8dea4d34","sha512":"275dc64e44d0c993e978e965f0074189c5cb38227c52d1d1198ed6210c52d16d50100f14732b2497898347abc0740edfa990157fcbde72b8d1b0317f8aab8ffc","ssdeep":"96:ls12nTzg0w6x8TmrRwEs+OwEs+4s+s9tAEwWPwEs+hmYe8Ns7O0nsMs+r6sOwEsw:e12nTzgxirA4Ys3JYe97eZqFfMq6R7","tlshash":"f8e1767a0e99a808c4394c966bc37eb1cd1573d24aceed9310ada91919c2177d3af7c2","first_seen":"2026-03-26T14:15:14.95302Z","last_seen":"2026-03-26T14:15:14.95302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg541c6723435d41898a9e2b0272a1da68.png","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg541c6723435d41898a9e2b0272a1da68.png HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4296\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5E1E3C92D0CCADB628\r\nAccept-Ranges: bytes\r\nETag: \"D10B3DBB75346771C826BD1B85BD4DD7\"\r\nLast-Modified: Tue, 17 Mar 2026 08:05:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17978645319691326100\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0Qs9u3U0Z3HIJr0bhb1N1w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4296,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"d10b3dbb75346771c826bd1b85bd4dd7","sha1":"cb7a2fadb38b4d5adeee97d9a979db1f7ac5f105","sha256":"9d43b276c52f24545dbd7aa0697524d657702140368d1be1db8d611e7ac93ffc","sha512":"19a8a51785ec4cde0d721b5d59f8bfd15ba1e47b69044a8342482b6b8b503a3d188c8e1b581904d2c528808749865f4cc97cbeb5d3bd5aa105d157c1219ce702","ssdeep":"96:l/L6bUu4DoTfVusSXmbH5HOe2WlnVMWU0eEDjZvW9y1VtOGL4+BapaL:zu4/WDpeYnVkGvMAMyjBa4L","tlshash":"6c917cf836d4618c598cf3c7e0f31a180eb29168d13dde96a0a4f7774e1731c64d2a58","first_seen":"2026-03-23T14:49:32.955811Z","last_seen":"2026-03-26T14:42:44.146416Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":954,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"m3a9.nasdaqt.vip/ws/9aa12672-a06a-4229-bafd-fd11df391b7b","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /ws/9aa12672-a06a-4229-bafd-fd11df391b7b HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m3a9.nasdaqt.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: zpdMXdw0SAbOg0vyY55/AQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Thu, 26 Mar 2026 14:14:54 GMT\r\nConnection: upgrade\r\nServer: ****\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Zg/RgiC/Vkfz8JN6cBC3g1tseZI=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 71dfe9e85fe9578e1ee854bfb06b0ae6\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T08:46:19.269091Z","times_seen":17900155,"resource_available":true,"data":null}},"time_used":1371,"timings":{"blocked":601,"dns":2,"connect":148,"send":0,"wait":455,"receive":1,"ssl":163},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/js/waf_protection_029e1b8c9ccb785c9595899302448d78.js","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:49.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/js/waf_protection_029e1b8c9ccb785c9595899302448d78.js HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: WAF\r\nDate: Thu, 26 Mar 2026 14:14:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 119055\r\nLast-Modified: Sat, 28 Feb 2026 03:08:26 GMT\r\nConnection: keep-alive\r\nETag: \"69a25c2a-1d10f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119055,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ed4adc9efcea8e881951d222396719ad","sha1":"9ddfd9324215ffa4c93ef58d5ed56bb9101ca9b3","sha256":"12ae70c474a972509cae48ae2781e4bac8ddded10bc6f74e5bd2626b59d83e37","sha512":"f7ba270f94cb6a3414cf51c0445118a9d19c2b9da10398dc64405c43e929213e0263f6988b7bf4ca15a80ebbcdca55cfb5e1979b966c8aa0a40dde1ce742b72f","ssdeep":"3072:qC3T79xa0O79e8cdUIGTh3S9g1iDVNh3tyZZ5u4eQI7M:H79xa0O79e8cCI+hC9g1iDVNh3ou4eC","tlshash":"15c3634022e06809d397db7a372bb4e1f41d796b7ec24c8fe314be986685716fae1530","first_seen":"2026-03-23T14:49:32.997187Z","last_seen":"2026-03-26T14:42:44.14518Z","times_seen":7,"resource_available":true,"data":null}},"time_used":1284,"timings":{"blocked":317,"dns":1,"connect":155,"send":0,"wait":310,"receive":330,"ssl":168},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/home/a1_img.png","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:52.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/home/a1_img.png HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 36633\r\nConnection: keep-alive\r\nAge: 275469\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nEtag: W/\"69c39777-8f09\"\r\nExpires: Fri, 24 Apr 2026 16:23:30 GMT\r\nLast-Modified: Wed, 25 Mar 2026 08:06:15 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: 4738bd7e75be7bda02f2c268d0cbe418\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 178, 8-bit/color RGBA, non-interlaced","md5":"2c04d1be1f0ea9ccf3b44b37756c6393","sha1":"1ca90095eaeaba85510a6a2906258a22a8888167","sha256":"2534c54aeda64a28328f2f638b6b71c219fdec339189e0bb77d2b3766fc03a88","sha512":"71796fbc381c5524ca8db09ae7f5d9008f5169d1b440c28485affbcb03c42b84402c44484b5dde25039ca0daf9c82ee4b1f5f3f9e24b4b2670e231f07e59f29c","ssdeep":"768:89JALuTLjUdgO+Fmn7PPKD8ZVHp9obq0+TcdkN9MKp9o2E:MJALuT/1sn7XKAOObHN9MkY","tlshash":"1ef2f14b1617a859df188e2064c3c95b7cc577be9f033a7306ed86a4e109f39af86325","first_seen":"2026-03-09T14:06:13.755216Z","last_seen":"2026-07-18T23:25:11.753107Z","times_seen":19,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg12480e3f716947efa78cb7f5f3c2b0f2.jpg","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:52.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg12480e3f716947efa78cb7f5f3c2b0f2.jpg HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 38716\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5D33781B7EFB6585F4\r\nAccept-Ranges: bytes\r\nETag: \"A8FF31744FA58DFA523E90FC68A7E612\"\r\nLast-Modified: Tue, 17 Mar 2026 07:28:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8820519070750909383\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: qP8xdE+ljfpSPpD8aKfmEg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":38716,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 700x700, components 3","md5":"a8ff31744fa58dfa523e90fc68a7e612","sha1":"aaf1ac4177c0df3f588a01b6a6c44786019eb601","sha256":"866bdbc33abdaa67156a24ec89a20de4fc63e661e97175579dded4bb45058a4f","sha512":"dcf3a33d6b4de48d13e6bbf379a69d3d47f41a1938fab396e5feb877aeed95c60ca95870be721428a56aa9754e46932fb6b1357e2f4b7309d65161aa5db26a01","ssdeep":"768:4Jjetb8yi8ExEjxSBkLW8kKpotkSRbgtLo3xF:4+b8RhbRbg6X","tlshash":"8203e1e75fedab81d89db2f9e36327a8e70dce0dea8d6f38444242172205172ad112c5","first_seen":"2026-03-23T14:49:32.996246Z","last_seen":"2026-03-26T14:42:44.132002Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2151,"timings":{"blocked":969,"dns":874,"connect":20,"send":0,"wait":210,"receive":2,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: f111aa47173f74171774534493019\r\nContent-Length: 55\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":55,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"DINIW\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 7afceeee7568ee73d8c217c34bda79c4\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7584,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c0a635a0bbc2d3fbf5a48b919e2994be","sha1":"d3cb7dc26a2a36b72684832fef29938cd42be535","sha256":"e198144e43b157222ab19c5be0f0c7275abf37575c6fa13bb13f79151ecabe0b","sha512":"0f3c4e1427bdeeac83d98e126978f207e5c956f27bcee011268ce58327638e6e6c0103fc71f59b80f064b6512050421907953b78709c567a57b1b1415d2beb42","ssdeep":"96:/xYkeV9UUNGjJmtSXytCZV/xxLNKyLN39l2mM2zx2eAThgdJqUGKj0gq7RE0wp:GkekU0gteYWVnHZ3+mMo2Xn+017C0wp","tlshash":"52f1f83dfb598098d9304fa27fb7b8e0859330e64ece5da14d982c48291137fa1d5b9b","first_seen":"2026-03-26T14:15:14.958758Z","last_seen":"2026-03-26T14:15:14.958758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: c7a29cea8483611c1774534493028\r\nContent-Length: 53\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":53,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"CAD\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 418b8159663170e19b7e3486850c7717\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8095,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"911bce1afbb120d36ee88a80ee113dce","sha1":"c1169bfe44836b1fc10bd0118c5d2891f2193553","sha256":"139fa774cf205163c91669dd60a46556f918279f2cc828d64a35a7f818a0c480","sha512":"cfac26eb00b366b8f32e140df1dfeaaa5a5865ed0eced08f2cc2b4881f1c005a5979c9170e286266d66934d5ee149e5c40d72c8ce01698abb558a3f1586275cc","ssdeep":"96:epqLfzHvnJKiTrrSXFzu52b0wZq6KDJFsU3qplk:mqfHvn5rwzuYbmsUGlk","tlshash":"4af130bc1be9e888c434ccc22fd3bee0912537d35adfaca3c5996d0d9991674a1147e2","first_seen":"2026-03-26T14:15:14.960253Z","last_seen":"2026-03-26T14:15:14.960253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":289,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echang-bucket.oss-accelerate.aliyuncs.com/uploadimg8770cb98e714431d86e62fdba0487c3f.png","fqdn":"echang-bucket.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:54.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /uploadimg8770cb98e714431d86e62fdba0487c3f.png HTTP/1.1\r\nHost: echang-bucket.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 26 Mar 2026 14:14:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 234163\r\nConnection: keep-alive\r\nx-oss-request-id: 69C53F5FDE6693F4B49F2062\r\nAccept-Ranges: bytes\r\nETag: \"BD3B72E4E0121B7A6E0D1E7FE869969B\"\r\nLast-Modified: Wed, 18 Mar 2026 17:03:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18243871229667304350\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vTty5OASG3puDR5/6GmWmw==\r\nx-oss-server-time: 20\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":234163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 660 x 250, 8-bit/color RGBA, non-interlaced","md5":"bd3b72e4e0121b7a6e0d1e7fe869969b","sha1":"a2ddf5be23f00610b70e510b4cde8bfcb2217cde","sha256":"cb11da58e3e47d268734a0fc754a102ccb5a60b3cc3acef8427db2bb26e5a2fb","sha512":"f0ddd1abde410f657cf2210bb5913bcd32080b1925f784e4bc7819ce7a9306aafafb6044b5b9fd88fc25971ac2e8acbffd5525ab8dd4317de61cbcec65449219","ssdeep":"6144:Y183ucZJWeaU7XcyRLrdt8beJ8Cih9vasVCwNNtHNDOFlQ89:YW+cZJT7LrdoeJ8C4S+CEvtqHJ","tlshash":"5134231293acb9cef57bde164b0b19747ec69203be0517831817e4aeb5433b8697cb24","first_seen":"2026-03-23T14:49:32.982278Z","last_seen":"2026-03-26T14:42:44.141784Z","times_seen":7,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/tabbar/tab04.png","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:51.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/tabbar/tab04.png HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 619\r\nConnection: keep-alive\r\nAge: 275471\r\nCache-Control: max-age=2592000\r\nEtag: \"69c10133-26b\"\r\nExpires: Wed, 22 Apr 2026 09:43:40 GMT\r\nLast-Modified: Mon, 23 Mar 2026 09:00:35 GMT\r\nServer: ****\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: e060f4c75bd8bab68e79777beb2ad8af\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 32, 8-bit/color RGBA, non-interlaced","md5":"c64c25e814ef27cdf8ebc92a2f147451","sha1":"7042cb8f2f6feabf95e51dcaef0c8431cebe77d2","sha256":"e378ab023d20e01dc6c10b3059ad872a5e7917f73a751dfcaf901a0677e3e715","sha512":"0358e3a2272f04aaf15abb6bb047ba96cbc4e55be47ba13787aeb28b40ba71c09a77ea17efbe8f920bbbfeeaadf7c1050d952113e35f7a2fbfb6cbaa16986ec2","ssdeep":"","tlshash":"4cf002e2a29404d0bacd993d6b57f0ae3d6ae83e090759185c400d2d5e3bf3ea36b141","first_seen":"2026-03-09T14:06:13.845609Z","last_seen":"2026-07-18T23:25:11.731584Z","times_seen":28,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":501,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/platform/nasdaq/logo_144.png?1774505553737","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:52.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/platform/nasdaq/logo_144.png?1774505553737 HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 4978\r\nConnection: keep-alive\r\nAge: 4169\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nEtag: W/\"69c4ce6e-1356\"\r\nExpires: Sat, 25 Apr 2026 13:05:23 GMT\r\nLast-Modified: Thu, 26 Mar 2026 06:13:02 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: 043100ab6ba65193b80c0246f9368b05\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4950,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"343d6e55c61d696f89d00a238aef5a79","sha1":"10f2f88f9ebf9aff637fb316be44657c42c0e3ba","sha256":"acb273261971e7cc17f89ce85cd4d9d7a7533980a959633eea85ea589482039c","sha512":"3b7e8873e86246dfce5f0d6f12e2d2a82f2f5d7aec9063d34ea960c1ba6bbbac5c88eb0a57d12a2ff6982b69a095ddce8ca17ad771d7df2e96f0125046d889e6","ssdeep":"96:MSj6o/XqWrwMwsOrI5MepLxAWdWtylgPOArenFq5pu06/xrMFkmrrcS03ke03ScV:MS+WMmOk+epUylJAm506/WbxDCcrJVxX","tlshash":"94a17c9a951290f77be99817278950381e7328a428b827846fcfb7aed9631184ecb013","first_seen":"2026-03-23T14:49:33.025796Z","last_seen":"2026-03-26T14:42:44.12543Z","times_seen":7,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: c7fcabc7b4d8e3211774534493027\r\nContent-Length: 54\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":54,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"IXIC\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: 5f9273b1745e9e8b820de2f46febe2e9\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8692,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"182117b8fb896c02300570f342d4892d","sha1":"a340e849d4a048c2d691e9874713d9b12be346ea","sha256":"0dc0b1072da4f1a0efe1d016a7ae588d422ce551f4bbdf1f764ebd74f1101e3a","sha512":"1195e14bd0af7df944713fea5bf5d6131123f14764df36ccd6eb744ba8febb9c2abfc4bfee493c46630634332b8e53b76eed4052bb248e54e0a0ae30c8de0269","ssdeep":"96:AmCVBfge3uVa9E1lKSeczgUIyiMqg1CRvPAaxO054B0BEBWxeO:AmS5gSoKgzK/zLx34uK+N","tlshash":"0b02b47d8b46e46cd9308d866fc3bee4de1236c25ede9c9341ac2c1a0a54631e183bd7","first_seen":"2026-03-26T14:15:14.963953Z","last_seen":"2026-03-26T14:15:14.963953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/api/block/newKline","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"POST /api/block/newKline HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: zh\r\nlanguage: zh\r\nContent-Type: application/json\r\nBC-WAF-CSRF-TOKEN: 7b9e909cd2abb8e4e432060c9d3ac0c3\r\nBC-WAF-REPLAY-TOKEN: c7a29cea8483611c1774534493028\r\nContent-Length: 53\r\nOrigin: https://m3a9.nasdaqt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":53,"data":"{\"interval\":\"FIVE_MIN\",\"market\":\"mt5\",\"symbol\":\"HSI\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: ****\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m3a9.nasdaqt.vip\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Request-Id: b6e7c9ce0096ea3f339ef4c5515e4af1\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7925,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4571db302464c5e746088a4ac6f403c","sha1":"0d012242e52c0bec38ac4205f9d356d5c2e648bf","sha256":"bf77c6eef92dc1a8edf5f1a06aff2fe924de2bc2a9b91719a42e57d14b47da5c","sha512":"6b59d09bec24fd46a33329594094aa24ca517f29b0675014bd98422fe59cf40f9fdc373a098cf4f65db9fa8ceee5af67657d7b89aa3ea9345539f560c96c2bd5","ssdeep":"96:KDj7XrB6hwBdpa9BkCqeF/TVz0HUAqqocbvLHDUp2Crb8MvyXhFM:cj77B6eRa9BkCqeF5PZqtshrFqhFM","tlshash":"1bf132be0b79a006e530ad92efc77ade8d0673c74bcf9fd2269f680d095053090467a2","first_seen":"2026-03-26T14:15:14.965453Z","last_seen":"2026-03-26T14:42:44.10815Z","times_seen":2,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":290,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m3a9.nasdaqt.vip/static/home/enk.gif","fqdn":"m3a9.nasdaqt.vip","domain":"nasdaqt.vip","tld":"vip"},"ip":{"addr":"151.243.131.108","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m3a9.nasdaqt.vip/","date":"2026-03-26T14:14:53.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m3a9.nasdaqt.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:26:27 GMT","end":"Sun, 21 Jun 2026 06:26:26 GMT"},"fingerprint":{"sha1":"49:E0:94:09:7D:70:F1:B3:3C:29:61:94:6F:96:E3:CF:09:16:1C:41","sha256":"B2:EA:29:8C:80:4E:21:C6:6C:34:AE:EB:1F:56:73:23:2D:A9:6A:96:F4:5D:6D:00:A2:AA:F3:67:FB:76:2E:DD"}}},"request":{"raw":"GET /static/home/enk.gif HTTP/1.1\r\nHost: m3a9.nasdaqt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_sslproxy_server=41b69685-bb78-468e49e3fc5f674b00e9db74c15b08a24e41; bc_waf_csrf_session=ee788be5-aeae-4401e0577469df2c34\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Mar 2026 14:14:53 GMT\r\nContent-Type: image/gif\r\nContent-Length: 307800\r\nConnection: keep-alive\r\nAge: 275470\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nEtag: W/\"69c39777-53921\"\r\nExpires: Fri, 24 Apr 2026 16:23:31 GMT\r\nLast-Modified: Wed, 25 Mar 2026 08:06:15 GMT\r\nServer: ****\r\nVary: Accept-Encoding\r\nX-Cache: HIT\r\nStrict-Transport-Security: max-age=0; preload\r\nX-Cache-Hit: edge\r\nX-Request-Id: ae14aa19076dc36ac275d7e058659ee8\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":342305,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 800","md5":"0c213c1a489e987b78d7328cfe1bd840","sha1":"41e5a53e41ffe0cc4c99e8e98e0eb750117e9d18","sha256":"a4594eed78ebd1cb2ad30a28e026fad3c9046ae5b1aa71dec4c6b9702c12bbf5","sha512":"4da3afc8eb4803cff493835c4cc85ab57fc816f70943978e502b55736ada97b1858a8f1b1a6e65f150d266f1c42bf570ab441e951217aee4f2801a1262e3118d","ssdeep":"6144:2E/igWxC6ej+F9A18h7+Zxuvve8n37lm4Wl+DVAXQbo/N2mAbwBI:5/igWo1j+fA107+qrnrlu8ZkN2mtBI","tlshash":"da74021ed12702b19d3f1679f41f5ac8295fa92c05323e278ca0b5e64a4969f39c4ecf","first_seen":"2024-10-31T21:21:10.450985Z","last_seen":"2026-07-28T18:44:07.214411Z","times_seen":201,"resource_available":false,"data":null}},"time_used":1324,"timings":{"blocked":778,"dns":0,"connect":0,"send":0,"wait":188,"receive":358,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"m3a9.nasdaqt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"m3a9.nasdaqt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}