{"report_id":"11677e19-e3a1-4ec7-a788-4ae313d45e2c","version":0,"status":"done","tags":[],"date":"2026-09-29T04:52:27Z","url":{"schema":"http","addr":"phoenixdexjt.net/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":0,"asn":8796,"as":"FASTNET DATA INC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"title":"Phoenixdexjt","dom":{"size":28655,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22156)","md5":"4e9016de8b5ce56cbcca04e9843526b5","sha1":"33c60cb8ba8bfb0286f48fabe2ffa33648cc0171","sha256":"6faf09b7e6cb17123426c6444dfd2d51d7d5fa66fb666639c79347294acc64e0","sha512":"dd22de3a2f7c3cb70fb6e59bdaa21927f903a0644c6609e9ab6f8219d7d46ad2099074f542762e919a6ca73182841c1f1f0f7383926e0ef801882e0dc5679888","ssdeep":"384:p6Y4ZCx42oyBCNmTFFFObFD7F/kRa13YslI:puQx42vBC2/OhDB/Qa13YslI","tlshash":"f0d27eb9710409a307b7aac9d4a17e5a7696f30fc41685013aaccfd80ff3cf4ba59664","dom_hash":"domhashf4df907c06f69cf0098dd12474481f48","first_seen":"2026-09-29T04:52:47.841861Z","last_seen":"2026-09-29T04:52:47.841861Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"phoenixdexjt.net/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":0,"asn":8796,"as":"FASTNET DATA INC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T04:52:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hashkxjts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"heco.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-06-19T02:24:37.940355Z","last_seen":"2026-09-23T16:09:47.28823Z","alert_count":0,"request_count":16,"received_data":1852637,"sent_data":9070,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"phoenixdexjt.net","ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"domain_registered":"2026-09-19","domain_rank":0,"first_seen":"2026-09-29T04:50:15.811937Z","last_seen":"2026-09-29T04:50:15.811937Z","alert_count":27,"request_count":27,"received_data":2682789,"sent_data":12239,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hashkxjts.com","ip":{"addr":"104.21.93.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-28","domain_rank":0,"first_seen":"2026-09-23T15:54:49.013584Z","last_seen":"2026-09-23T15:54:52.609511Z","alert_count":10,"request_count":10,"received_data":177640,"sent_data":5172,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"assets.kraken.com","ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-04-03","domain_rank":854257,"first_seen":"2019-10-31T16:08:46Z","last_seen":"2026-09-23T16:22:24.734869Z","alert_count":0,"request_count":9,"received_data":104829,"sent_data":5006,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"webapi.phoenixdexjt.com","ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-14","domain_rank":0,"first_seen":"2026-09-29T04:48:47.797352Z","last_seen":"2026-09-29T04:49:16.369259Z","alert_count":11,"request_count":12,"received_data":11860,"sent_data":6645,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-10-03T21:29:34.461026Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"967b4147d1ff316b8d0364d5202781a6","sha1":"9670ec4a44100a95af15280e4fe8444b2d1fff3c","sha256":"e03bd6118e1f01d6afd363e6fd4c02b57d00327a8116a650f83cc1eb6c819ceb","sha512":"31a101578a34f11e8fecd77865c2053642d0117f5185d1cacb2831b6be7e21fee46ae532491af4a00e1f7c0dc1391632892625332f61c57ca8bfd9346f82a0b7","ssdeep":"","tlshash":"bd11abfe191a602a6303404e976b7801642250b9000a184173ccda9dbbaaf6dd0cbb8c","size":1034,"data":"","first_seen":"2026-09-23T15:54:57.041973Z","last_seen":"2026-09-29T04:53:16.044018Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-10-05T07:34:08.96423Z","times_seen":49437,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-10-04T21:49:20.212257Z","times_seen":50650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-10-04T00:22:14.668579Z","times_seen":933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-29T05:15:58.790797Z","times_seen":6506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/currencyItem-82508da3.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b983a02ce264e9360c4ee4979a43d312","sha1":"c5a8aedf02634708929ab158a82348da2ecccd64","sha256":"e0a77f48e8e1321bdfa2a59145e283c14c8333ee49356c888c897376e9a46170","sha512":"6d73925dbf41dc85d446b3c629ffaecea808553fcc4727fee781613afa4eab9a56d6b988edef5bcfc78e61fc686a343a672954bdf0d58eef159bf374e3b0e92b","ssdeep":"","tlshash":"c021dd8a9901c7b1cbbe9162c1bd0415031d7bda700185c1fbed054a3b979fcd328b31","size":1240,"data":"","first_seen":"2026-09-23T15:54:56.98873Z","last_seen":"2026-09-29T04:53:16.014568Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/en-a4f17212.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0f1ba69b7314cfcc76085620d6e5ffac","sha1":"6506ade982423e83ae1b3cb3e9c800fece6d1991","sha256":"9cffb92f8ea905a9b51425b80216c7028441969523947d02b65324c989ef3149","sha512":"71f4fa964deb3fd41c0f2025de2c1a92a57c08a7165f3e70bf7c859746ff86bf9b25d0fbe440a5955704cd8e489ac2ead6cfcdaa402ab75cdc4c7f51c8aca8a1","ssdeep":"768:JY/4tZcEw/o7rKOdAgPsifnAMCHrAaAMEVoP6+6sPG9q1mwO6fpk7aOLxI:JwponKOdzbEHrdEVLsPWqqLxI","tlshash":"5113c7897e1a889a04f3636774ce6e2024f50ac18255841f4fedc9fd53d2b67b3a7728","size":43924,"data":"","first_seen":"2026-09-23T15:54:57.03805Z","last_seen":"2026-09-29T04:53:16.016801Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-6d6495cc.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"898552c56ca44107151554a4242aebf8","sha1":"f28569a97cb5b2464fa95a9e5fde725ba1a89a20","sha256":"d966c6dc0142e00ef83c2e5d7a8acd9efea54c8138baf38c64d9e9b4a1dee576","sha512":"398e135f99243df4f992e02d62b1f5369933c5874daa6da3b410093e15a60671d65c4f2de9cadf9e86838caaf3f23046df0091358aeefdbdef5815e9c20879db","ssdeep":"96:5MQ57gPzRpnYfN13IqZqD+wnv6H1ctbCys1xHO0LDt4IGeby3huOc3TNCFJtIFPe:XiPzRhY1hIgqiwSctbo1lZxCh8TNzFEP","tlshash":"da91b78cf80389ba9a77589844550420328c3bfeb1254cf6f2fe8d4d67b5dbad794721","size":4558,"data":"","first_seen":"2026-09-23T15:54:57.026475Z","last_seen":"2026-09-29T04:53:16.022494Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-88138ce3.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b7bddb5a28d4d4d0586cd9bea2227b9","sha1":"ea4722664e04eb3815ebffb7c5cceddd86f2bb19","sha256":"706634c3e33025bb550725f3d74a95f8d28d6ac9b9b5e35a27738b6e0e7d8752","sha512":"2f6094b54f37865f3b40476cdca9ad400ab37c5132796314afe74d342f9adfc7217a7254a2c17f6f113b4890bb926820c9bf8eed3c8bd47fa0dd6f46e698b703","ssdeep":"","tlshash":"6df0c96fb9aa84721bb388eca1230820a6081b166754c4a8d4870b10da34ce7d16e618","size":508,"data":"","first_seen":"2026-09-23T15:54:57.002579Z","last_seen":"2026-09-29T04:53:15.987329Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/filters-0c8d7e8e.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf1ba9acc305f48a8820afe830ad727","sha1":"7eccf38b29bbda85293d6b225a4e4b4e472862f0","sha256":"a392ceab2daf3d911ad88793e3b22bba60a6a3bd2be4c7719d75ca476cbfa344","sha512":"5c5ef431e121826a922bfcfae987392054418899de1ee6eb28c413268632cc2b9278c5912fd63bf470896b190ccb5fe19f6507c07f2080e5d23534655aa44ff1","ssdeep":"","tlshash":"b87132edf8d3603396f999e90019411172cebf14786e0e4ef99bd0466963888d07fb64","size":3510,"data":"","first_seen":"2026-09-23T15:54:56.993618Z","last_seen":"2026-09-29T04:53:15.997232Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-29T05:15:58.789987Z","times_seen":1150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-10-04T06:19:54.802719Z","times_seen":7591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-10-04T00:22:14.884336Z","times_seen":6964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-29T05:15:58.795131Z","times_seen":1137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-10-05T01:26:01.483431Z","times_seen":7696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-29T05:15:58.7821Z","times_seen":6290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-10-05T01:14:24.250924Z","times_seen":15571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-10-04T06:09:08.729435Z","times_seen":7622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-10-04T00:16:23.613108Z","times_seen":8081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-ce97543e.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22b9f5ffd62409a71fefb0154902a265","sha1":"491a328db27dc94a7c3d9c19a4344831856bb5d0","sha256":"c7af9015bcc207584c4dcb5317d3a880a1864444cd9a89ae2ee9508fab522623","sha512":"e5e5193757abb988d53467e53b9204ca1e8b8563074c1c9d2db78b6fcdab036dd224e6065a9c9c352774401ee400f3bd7af1e67f239aa3952a70b575a9d81741","ssdeep":"1536:6tdklD8DxYG68C8NCLlEgL4ky3x+9YQ9MYj9vO/DuKu4chynM6fPqu8l:OdklCC8NCLlEgJYQ9MYj9vO/DuKu44v","tlshash":"f0a34e8d994a0eff6dfe4848a92a491011781f9299cccc93b3ae5f5537f9cd4238e718","size":102829,"data":"","first_seen":"2026-09-29T04:48:56.053803Z","last_seen":"2026-09-29T04:53:15.995976Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/charting_library/charting_library.min.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-10-04T06:39:22.605211Z","times_seen":7403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-1189a09e.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ed82cb909a2fd09e41116ad6d054a4a","sha1":"82b7c6fc9fec740d60d24c0e84a32b2164f21870","sha256":"aacde004c72d892d84cf5f27beaf9081a024df7b8e92e1dcbbdb85b6a0528693","sha512":"d37e77194da91b961ec240e11fbb58f726fa1dac0c95c067785ccc3c8b1929bd4304c9f0914d639ede4eaa00537ce4443df993a4d024913a2c1385d9c79e3860","ssdeep":"384:pp0Bz/9qP822Z0re1FF9+fdIUDjJj5fMbPO5NvZZYoIWFVCjBJI4w5U:pp05sEfbPF9+fdi8UoIWFVCn","tlshash":"4b52b696f606da3df5b7d051848c0011361e7fde900c88a7b9be1d863356ff8bb59a18","size":14456,"data":"","first_seen":"2026-09-23T15:54:57.031895Z","last_seen":"2026-09-29T04:53:15.990979Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-10-04T20:57:56.191707Z","times_seen":10460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1831de11b3f834a2de4166013d75eda2","sha1":"4cd45ddc173078df52a6a5da8ee597fc7b8fa84b","sha256":"890bb39f44fdd8c6b918239d60c90dce9fd3fae1b9b2049c5a0e9f80f02c8009","sha512":"7e4471d6a84fcda0c90b1ef370a7ac6853bb28d5fe3de1f3955f2cd491853b7b07f7eab7a9df9731f584e664d59606ca969359d613ca46193c9a31e392fa594b","ssdeep":"","tlshash":"b9c08cc4b0c36e103a26a450a1af34e4d0248027b04c1b139da8e88d2e630f18233e98","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-29T05:15:58.794073Z","times_seen":865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-10-04T06:39:22.665937Z","times_seen":2014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-2abc8f12.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2991d40b485f6c512c711b87f492ea79","sha1":"cecc3f4b9e1eb936c6243ef0ccafe2ec08fa5315","sha256":"91222758f331a32255b01a15eb65d7de0097a81f3048424fc7dd781ce3994ad9","sha512":"e34536356dcb40a8d6c339a8e33ff6b8e942953c53230cd10c20ba56f0434c33cbb8103f658de45d8b93f033b290895a1c520143bbb9d2ce36538e204e4f382e","ssdeep":"","tlshash":"1101fdf8fc0d8ebb1f6206800290250014091fddfa1405f198877e661be0940d7de72d","size":772,"data":"","first_seen":"2026-09-04T15:56:41.497381Z","last_seen":"2026-09-29T04:53:16.038345Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-29T05:15:58.779256Z","times_seen":7295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-29T05:15:58.784045Z","times_seen":7045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-29T05:15:58.793422Z","times_seen":1151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-10-03T02:47:11.949799Z","times_seen":7280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/#/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-29T05:15:58.784824Z","times_seen":554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/vendor-1d002a72.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fb9bfa74027d2f8728973476d5b78b2","sha1":"1cf0d5b19a1e46c91a3f987af28287c6a42f9fc5","sha256":"9ecaa11d37c39b62876ef82bf0f2a1ef123d163d06ef7b853a991af842f02798","sha512":"f9976b7b74a2d7f012b3eb1fdbaa31fda4af6c03d3376885c6878ad799d6d570a013e1934e12073432f800bd54fb6b793a097d8c7ea7ee19ea5e916b72cc36c5","ssdeep":"12288:Q49EWIf3c3JETG3Aj3no7ZAwX16DXYLtXwn4jpWQX8hrEnM4HC2S:Q49EWIkxwjIZAwXMDXCRnjpWQX8hN","tlshash":"5d152ac97692f06147ab24e240bb0006f3396e59740e84a4f16dd8eb7d79d89d2b7f38","size":939939,"data":"","first_seen":"2026-09-04T15:56:41.535928Z","last_seen":"2026-09-29T04:53:16.028135Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpef3a5cbc336f4438aac0ebb706604f70.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.442Z","timestamp":1790657513442,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpef3a5cbc336f4438aac0ebb706604f70.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109572\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EB6AFD363833150C9A\r\nAccept-Ranges: bytes\r\nETag: \"440CBE77674A730D672DE16899862FFB\"\r\nLast-Modified: Tue, 08 Apr 2025 17:30:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5053394575354269543\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RAy+d2dKcw1nLeFomYYv+w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":109572,"size_decoded":110148,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"440cbe77674a730d672de16899862ffb","sha1":"8cf70e0ed50ce4ef8d0185d45abc121ee0525cae","sha256":"42d66c6c6f9483e678f137b9cd29c14c88bedf815dcb7454d7cd03160c923d6a","sha512":"4754244bc1be99df8f456441cefb8dc13787b841cd840b473f634ac78265ef613857dc6d1450908b5412cee5e6b7d09f16fbf31b90185914439e20746975221c","ssdeep":"1536:6GE8uzA+S4xqE83K7O5zETHz3TPFQ4Ix2xg/YuDQ9nTBZyX7+oz7dB5zQOXquOme:C9qUS0HXuz4kd71b5QBu7NQ","tlshash":"99b302108f94d7c8d7172f35469e8ad1befa14ad34036e972bfa490b2d5aa748c0cdc6","first_seen":"2024-08-29T18:12:05.89455Z","last_seen":"2026-09-29T05:15:58.698569Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2017,"timings":{"blocked":1644,"dns":0,"connect":0,"send":0,"wait":295,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-ce97543e.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:50.611Z","timestamp":1790657510611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/index-ce97543e.js HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-191ad\"\r\nexpires: Tue, 29 Sep 2026 16:51:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102829,"size_decoded":28330,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"22b9f5ffd62409a71fefb0154902a265","sha1":"491a328db27dc94a7c3d9c19a4344831856bb5d0","sha256":"c7af9015bcc207584c4dcb5317d3a880a1864444cd9a89ae2ee9508fab522623","sha512":"e5e5193757abb988d53467e53b9204ca1e8b8563074c1c9d2db78b6fcdab036dd224e6065a9c9c352774401ee400f3bd7af1e67f239aa3952a70b575a9d81741","ssdeep":"1536:6tdklD8DxYG68C8NCLlEgL4ky3x+9YQ9MYj9vO/DuKu4chynM6fPqu8l:OdklCC8NCLlEgJYQ9MYj9vO/DuKu44v","tlshash":"f0a34e8d994a0eff6dfe4848a92a491011781f9299cccc93b3ae5f5537f9cd4238e718","first_seen":"2026-09-29T04:48:56.053803Z","last_seen":"2026-09-29T04:53:15.995976Z","times_seen":4,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/platform/dev/config.js?1790657511678","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.007Z","timestamp":1790657512007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /platform/dev/config.js?1790657511678 HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\netag: \"6aade89a-18a\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":745,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-10-03T21:29:34.439246Z","times_seen":605,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/currencyItem-82508da3.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.024Z","timestamp":1790657512024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/currencyItem-82508da3.js HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-4d8\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1240,"size_decoded":969,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1239)","md5":"b983a02ce264e9360c4ee4979a43d312","sha1":"c5a8aedf02634708929ab158a82348da2ecccd64","sha256":"e0a77f48e8e1321bdfa2a59145e283c14c8333ee49356c888c897376e9a46170","sha512":"6d73925dbf41dc85d446b3c629ffaecea808553fcc4727fee781613afa4eab9a56d6b988edef5bcfc78e61fc686a343a672954bdf0d58eef159bf374e3b0e92b","ssdeep":"","tlshash":"c021dd8a9901c7b1cbbe9162c1bd0415031d7bda700185c1fbed054a3b979fcd328b31","first_seen":"2026-09-23T15:54:56.98873Z","last_seen":"2026-09-29T04:53:16.014568Z","times_seen":9,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp8a1d3a40d8384febb7747ce48e682fce.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.358Z","timestamp":1790657513358,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp8a1d3a40d8384febb7747ce48e682fce.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3391\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EAAB6732383848A94F\r\nAccept-Ranges: bytes\r\nETag: \"0E83F87B663B1CEF21354B06AE01F593\"\r\nLast-Modified: Tue, 08 Apr 2025 17:37:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10489740580964031108\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: DoP4e2Y7HO8hNUsGrgH1kw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3391,"size_decoded":3966,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3","md5":"0e83f87b663b1cef21354b06ae01f593","sha1":"e7753016588dc49f7a7d53df75958020b50abd33","sha256":"d2385c360b44175560f7af7c2bb4593ad29c4b462b751e791ec59638e9ade189","sha512":"40c06bd1c4e46dc29ac53ead0fb75548d62f36f2e6f180adbe9d03e6dc8e16e108cae727cd4a90a62e1832b340cd1ca4709cfd656c4c3c690846ffdd8829aec8","ssdeep":"","tlshash":"5c614b9b4fed4408ec04a5bda5e00fa3c2d133727f717ca775897814147a280bb605e5","first_seen":"2024-08-29T18:12:05.909426Z","last_seen":"2026-09-29T05:15:58.720667Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1196,"timings":{"blocked":-1,"dns":18,"connect":292,"send":0,"wait":296,"receive":0,"ssl":589},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hashkxjts.com/trx.jpg?2.0.1786012398636","fqdn":"hashkxjts.com","domain":"hashkxjts.com","tld":"com"},"ip":{"addr":"104.21.93.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.407Z","timestamp":1790657513407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hashkxjts.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 14:11:51 GMT","end":"Sun, 22 Nov 2026 14:11:50 GMT"},"fingerprint":{"sha1":"D3:74:71:DD:CB:DE:85:8B:5E:11:03:81:83:1E:06:9F:58:3B:8F:17","sha256":"BA:E8:63:61:8A:9D:16:B9:55:8B:8B:70:C7:C7:63:90:1C:24:88:40:0C:82:24:6D:B1:FE:DC:D4:68:9C:8E:A2"}}},"request":{"raw":"GET /trx.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: hashkxjts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Apr 2026 14:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0c8e8-550b\"\r\nexpires: Thu, 29 Oct 2026 04:47:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G67BvmegUSQjAjN%2FU5MdA9906GhLi%2FfF%2FZxv0cUUR1TKT9AGDEQr7Gvo9nYU1PoQkQ3V1hqtHTYH5c1vALbDrARKU5bkMUq53aAuC41GFxHLPD8UzNm4ITSDtO7jMbuP\"}]}\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4286012e8bb56c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21771,"size_decoded":22251,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"64532c2e72b02b8b7efff747fe4dd64d","sha1":"6f5452a1a1d5822c0f47992e27cb6b4ff62b5000","sha256":"a4df7e1902478ffb14dd912c822f4205371b3e1e5ab1760614a95f2209e7084a","sha512":"15598146b71d0cb91e7596e9baede08da73af5feae0f594dfbf559048a2e74de2b51cf8a8f5a1397980e6928cd89d7056da176a273dc743234fea0519f6fcae5","ssdeep":"384:qE2ym/SACBh36o5HyoRIe609rzfUgjA+lV55IhTVV8trupKOHbPbXflSZxxDgD:qEJJPNlDztD55WTTYipd7PbXdsi","tlshash":"c6a2d01b1168a3cfc7319d3918ee01ace52ac4d27f1e2bec7490d2a66560794dfb902e","first_seen":"2025-06-19T02:24:45.829943Z","last_seen":"2026-09-29T05:15:58.738263Z","times_seen":14,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hashkxjts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpc3a2e089d4db4d378197c5466d8d7bcf.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.437Z","timestamp":1790657513437,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpc3a2e089d4db4d378197c5466d8d7bcf.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 255863\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EB8B90443236F95AC8\r\nAccept-Ranges: bytes\r\nETag: \"8E2D0D68EF7B3099A4FB1061C0847946\"\r\nLast-Modified: Tue, 08 Apr 2025 17:15:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9272553010199676724\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ji0NaO97MJmk+xBhwIR5Rg==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":255863,"size_decoded":256439,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"8e2d0d68ef7b3099a4fb1061c0847946","sha1":"34771929afc985fe955dd91402ca7a8ad95fbb9e","sha256":"bcbbd14dc00035f42df40f6a691ca1175d915f10bc9ca034c90e55d5ed666325","sha512":"52beddfce84fb8188e0a2e2d8e7d1c51f1b7611f1202105719307cc42af6678f1b2f41602f628d4f7bfa9cb99dbe1864638fe8538ca55d9384c55c6e61b023ea","ssdeep":"6144:NmiyznjkBNvPf7btuII7tmFgGexE/IDEl5/WuOy:NmiykBRluv7ISTEl5/Oy","tlshash":"294423d8b87278b2cbef0db49c59f15a3977606ca1bbbcb3395ca1da54324646c041ca","first_seen":"2024-08-29T18:12:05.902596Z","last_seen":"2026-09-29T05:15:58.756451Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2262,"timings":{"blocked":1657,"dns":0,"connect":0,"send":0,"wait":292,"receive":313,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/vendor-1d002a72.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:50.612Z","timestamp":1790657510612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/vendor-1d002a72.js HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-e57a3\"\r\nexpires: Tue, 29 Sep 2026 16:51:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":939939,"size_decoded":308816,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1fb9bfa74027d2f8728973476d5b78b2","sha1":"1cf0d5b19a1e46c91a3f987af28287c6a42f9fc5","sha256":"9ecaa11d37c39b62876ef82bf0f2a1ef123d163d06ef7b853a991af842f02798","sha512":"f9976b7b74a2d7f012b3eb1fdbaa31fda4af6c03d3376885c6878ad799d6d570a013e1934e12073432f800bd54fb6b793a097d8c7ea7ee19ea5e916b72cc36c5","ssdeep":"12288:Q49EWIf3c3JETG3Aj3no7ZAwX16DXYLtXwn4jpWQX8hrEnM4HC2S:Q49EWIkxwjIZAwXMDXCRnjpWQX8hN","tlshash":"5d152ac97692f06147ab24e240bb0006f3396e59740e84a4f16dd8eb7d79d89d2b7f38","first_seen":"2026-09-04T15:56:41.535928Z","last_seen":"2026-09-29T04:53:16.028135Z","times_seen":11,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/filters-0c8d7e8e.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.022Z","timestamp":1790657512022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/filters-0c8d7e8e.js HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-db6\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3510,"size_decoded":1597,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3487)","md5":"6cf1ba9acc305f48a8820afe830ad727","sha1":"7eccf38b29bbda85293d6b225a4e4b4e472862f0","sha256":"a392ceab2daf3d911ad88793e3b22bba60a6a3bd2be4c7719d75ca476cbfa344","sha512":"5c5ef431e121826a922bfcfae987392054418899de1ee6eb28c413268632cc2b9278c5912fd63bf470896b190ccb5fe19f6507c07f2080e5d23534655aa44ff1","ssdeep":"","tlshash":"b87132edf8d3603396f999e90019411172cebf14786e0e4ef99bd0466963888d07fb64","first_seen":"2026-09-23T15:54:56.993618Z","last_seen":"2026-09-29T04:53:15.997232Z","times_seen":9,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hashkxjts.com/eth.jpg?2.0.1786012398636","fqdn":"hashkxjts.com","domain":"hashkxjts.com","tld":"com"},"ip":{"addr":"104.21.93.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.386Z","timestamp":1790657513386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hashkxjts.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 14:11:51 GMT","end":"Sun, 22 Nov 2026 14:11:50 GMT"},"fingerprint":{"sha1":"D3:74:71:DD:CB:DE:85:8B:5E:11:03:81:83:1E:06:9F:58:3B:8F:17","sha256":"BA:E8:63:61:8A:9D:16:B9:55:8B:8B:70:C7:C7:63:90:1C:24:88:40:0C:82:24:6D:B1:FE:DC:D4:68:9C:8E:A2"}}},"request":{"raw":"GET /eth.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: hashkxjts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Apr 2026 14:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0c8e8-42e9\"\r\nexpires: Thu, 29 Oct 2026 04:47:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJoJ7Ur1DWbMC6926LZWKiR%2FjGfF%2FbrdfZFbUGjIiK7mp0ihjaq%2FDGODSdSeNlx7Vop7iFLtGHU2%2BDJ8OOBfTXIqSKNw8QFxVBkjNfR8W%2FZq7mgG5GGpYoeyAcYPfUsv\"}]}\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4286012e8ba56c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17129,"size_decoded":17474,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e6ba74ee7aca970e9729ea2a96258819","sha1":"f7279d910c0e2e0e79b6920d7fedf6d40821857e","sha256":"7e3f13eb845de91e75bb893260d9f5de5d392a6dea242ca541cd0bfa46f88f78","sha512":"20a69f200aa6d4a8995e6c4edb5aab429d40f404b3e5baa04822120f998425f5fe195e72cf0968f1af177defaae4887ba1f462716f3f598a1b2e19a04c7516f7","ssdeep":"384:cQaUXlJMaqqpzybjTydlLjO1hSY+6Sgs+ZHDZAl7vZ:8UXlWkuHAohSYj/sSHDuD","tlshash":"f472c0ea16f59193d29a0ff7af288dd5c557743a598f97cae9508806d0fa0b0fc3a4c0","first_seen":"2025-06-19T02:24:45.749988Z","last_seen":"2026-09-29T05:15:58.717891Z","times_seen":14,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":5,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hashkxjts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hashkxjts.com/ltc.jpg?2.0.1786012398636","fqdn":"hashkxjts.com","domain":"hashkxjts.com","tld":"com"},"ip":{"addr":"104.21.93.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.397Z","timestamp":1790657513397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hashkxjts.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 14:11:51 GMT","end":"Sun, 22 Nov 2026 14:11:50 GMT"},"fingerprint":{"sha1":"D3:74:71:DD:CB:DE:85:8B:5E:11:03:81:83:1E:06:9F:58:3B:8F:17","sha256":"BA:E8:63:61:8A:9D:16:B9:55:8B:8B:70:C7:C7:63:90:1C:24:88:40:0C:82:24:6D:B1:FE:DC:D4:68:9C:8E:A2"}}},"request":{"raw":"GET /ltc.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: hashkxjts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Apr 2026 14:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0c8e8-37bf\"\r\nexpires: Thu, 29 Oct 2026 04:47:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4fpBn18deNzERYoRnBKsQv0pKVFTiOi0okOWQz7j2Y1ebOnpOc%2Fk0GyK4rDNaN90Rc5L7QMAQ7uiQruWydB5Lfd08rsJGezuWvA7HZYVgXsh%2F31cF3c0Yi4xuh0Uuxt\"}]}\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4286012e8b756c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14271,"size_decoded":14486,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"a056a0cd63c814cbcb32fc85f48f5238","sha1":"e404ebe2d6dbbe64df575ab4843a41e6d75f8ec1","sha256":"4f1f0a756c4b59e4eafa13e903068c407f1ee5c70d687ccec84272c38c082332","sha512":"a5f02566253ff7f55a587b3948c3ef2abe5cb5e17e2795b4028aac12b1a135f1f4318252e12285a4f18a76e89c08b168d952cfe8cfe1c329717e0a4c9953128b","ssdeep":"384:WxTWCV3/ju+JH0FvMqLSaXB4iL65Ko76E:WxTWw37FH0ZB4iL6j7j","tlshash":"1852c05cf7af3e22c0c461ff9b799255e768c405f841571acfb05a838a087f538a3696","first_seen":"2025-06-19T02:24:45.80361Z","last_seen":"2026-09-29T05:15:58.736651Z","times_seen":14,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hashkxjts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hashkxjts.com/doge.jpg?2.0.1786012398636","fqdn":"hashkxjts.com","domain":"hashkxjts.com","tld":"com"},"ip":{"addr":"104.21.93.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.406Z","timestamp":1790657513406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hashkxjts.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 14:11:51 GMT","end":"Sun, 22 Nov 2026 14:11:50 GMT"},"fingerprint":{"sha1":"D3:74:71:DD:CB:DE:85:8B:5E:11:03:81:83:1E:06:9F:58:3B:8F:17","sha256":"BA:E8:63:61:8A:9D:16:B9:55:8B:8B:70:C7:C7:63:90:1C:24:88:40:0C:82:24:6D:B1:FE:DC:D4:68:9C:8E:A2"}}},"request":{"raw":"GET /doge.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: hashkxjts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Apr 2026 14:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0c8e8-51d3\"\r\nexpires: Thu, 29 Oct 2026 04:47:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bER224rwFfV5C%2FEX59ymQ4NlMX1f7%2FGDOkYQrozCmnH5sjZl%2FQR6eqlUIdqh0B4kgf2wTiKGUYBRSQJZC4%2FOihgTwXujDNFFmyGrZX0hqwZuKq16cwib2p34CjYLmNTa\"}]}\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4286012e8bc56c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20947,"size_decoded":21624,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"48bc32bbaa8a316d1c23b407a8799288","sha1":"ebbc136231178bf80a0acfc6959d9b45bbecf8c8","sha256":"1d314e4d387716d3fd74aa993012cfb3397b1ebb5d8da271abac8cd034c0ef0e","sha512":"4418e4ed86d263063d20a94caf4bac177156772563f97d317a6f1aec79a6f90488a8a11d4a6a79e5c2668661ff53835fecd7787ef71c9edf3e8510266d86c5e7","ssdeep":"384:3BZ5UXLdHFv7YGA7PQiawWq7wPf5tFzU4yQEbEx5Gct1zTM31qZJaE4D:xZ5UbpFv7GPQiawxUPfrFHyQEbEx5BX+","tlshash":"6892d0a98b96359bcf527772398bf95b30074e17084786f68b04e0b40e7059ebc7ca23","first_seen":"2025-06-19T02:24:45.74065Z","last_seen":"2026-09-29T05:15:58.70581Z","times_seen":14,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hashkxjts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hashkxjts.com/dot.jpg?2.0.1786012398636","fqdn":"hashkxjts.com","domain":"hashkxjts.com","tld":"com"},"ip":{"addr":"104.21.93.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.432Z","timestamp":1790657513432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hashkxjts.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 14:11:51 GMT","end":"Sun, 22 Nov 2026 14:11:50 GMT"},"fingerprint":{"sha1":"D3:74:71:DD:CB:DE:85:8B:5E:11:03:81:83:1E:06:9F:58:3B:8F:17","sha256":"BA:E8:63:61:8A:9D:16:B9:55:8B:8B:70:C7:C7:63:90:1C:24:88:40:0C:82:24:6D:B1:FE:DC:D4:68:9C:8E:A2"}}},"request":{"raw":"GET /dot.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: hashkxjts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Apr 2026 14:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0c8e8-54ad\"\r\nexpires: Thu, 29 Oct 2026 04:47:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ai3vMZgAldJ0e8ujgilWFslYCfvxd8xH%2FJwHlK14gjcolwzrVqQ61WRpIbLWt9Q4OCIz3SiKvkr%2FQfMcHdhTXgx9euRuo9asmhNQu5V0VEvPud88V%2Bq9Wkzii9EzbmYe\"}]}\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4286012f8be56c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21677,"size_decoded":22247,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"3b09a25b3fe666c3bc2f63ec473597ea","sha1":"911f930787292f79573f49ae8e3b630582f03de8","sha256":"8de2938e4942481b72684f884744ee867dee9bd2fb5f5373663f8119aea546a0","sha512":"907b038619bb5aecc6f224b654b907145d62fb7f44b5a0b1dde5475748ac161484a321a73116ea6c7a48e8d344d4e38c5d845091a8b465d3ea970e497d7c8722","ssdeep":"384:9KyXEjihHrhAxfQGner0up1+fWaPK2DOEIcgoM3NnXD5fw2l7Y:9Kz/iGbuP+s2DoctMVJ72","tlshash":"e1a2d045b6bc871bc56a52341327ce5836e695402f868390a70e866c2c1cf9abdf46e5","first_seen":"2026-07-17T15:22:26.612863Z","last_seen":"2026-09-29T05:15:58.763858Z","times_seen":13,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hashkxjts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpd2e4066eef574b0a808bd88c78f39a3b.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.438Z","timestamp":1790657513438,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpd2e4066eef574b0a808bd88c78f39a3b.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 126750\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EA8B90443236CE59C8\r\nAccept-Ranges: bytes\r\nETag: \"9D3DD62CB672561DCCCF81ED5C49A731\"\r\nLast-Modified: Tue, 08 Apr 2025 17:29:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14280964938837360927\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nT3WLLZyVh3Mz4HtXEmnMQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":126750,"size_decoded":127327,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"9d3dd62cb672561dcccf81ed5c49a731","sha1":"5b9e5f09bf26ad485f0d5fb9e28eb174f065b744","sha256":"028e9028374f9ec529f0c565b90beb9cbfbf23eeb49c54f24c44e8f619fb2fa7","sha512":"6f2b36df6646a0f22dcb9e1cad3722cac29ae11a2af88d433c62d7f3b6d703a4a3f5aab65d6b777e4c80d9f96dcf09b28e8816249307c0c85a9673dd843f15c6","ssdeep":"1536:6VUlFXPlozlYC/nq4eJa+ZhiY07BFxyNrPhsWmTd8l9Pa8MVU33yCX7b/ZKzRvyS:jlFfIlYCWd3pSBHEiE2VA/hKzQMCS","tlshash":"95c312d38b6609acc01d1a3c8a63b3b769139218049d53a7dfb78492fb05b8d3c7259e","first_seen":"2024-08-29T18:12:05.893037Z","last_seen":"2026-09-29T05:15:58.77208Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1656,"timings":{"blocked":1050,"dns":0,"connect":0,"send":0,"wait":289,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp68f42d74bbc14e628c681ebd23a7fd12.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:54.058Z","timestamp":1790657514058,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp68f42d74bbc14e628c681ebd23a7fd12.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 87547\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EAB1E82332318B9414\r\nAccept-Ranges: bytes\r\nETag: \"20E0BEE18FF68E334036C14BFB26804A\"\r\nLast-Modified: Sat, 07 Jun 2025 14:33:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15839281543105551514\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: IOC+4Y/2jjNANsFL+yaASg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":87547,"size_decoded":88123,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x672, components 3","md5":"20e0bee18ff68e334036c14bfb26804a","sha1":"ea1cc52dcc8e826ef14b103450ee06694dc248fd","sha256":"ed284cf6278133043dc39ca619b1ba3a162fd1cf2d267cc264a953fccec94245","sha512":"bec600aadad03f7a69778d7522cf561c10f8e56b456c130e0dd6299519dc5411a60849a00cfecc093bdb496eeff337fb8b78dafd03574975ca1f639e284473b0","ssdeep":"1536:jnbvv5xy0HJXo5bDD3IFVUEFUhFNlV8MwebTuWAGuucZUXAGSyXeuxLu:/r5Jo13IF6E2hHl6MHHKucZYAGSZuxLu","tlshash":"e18312b6930812dfc911573082685839783cd0314716e6a3ffa7357939dbe95ba241df","first_seen":"2026-07-17T15:22:26.61609Z","last_seen":"2026-09-29T05:15:58.742763Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1026,"timings":{"blocked":448,"dns":0,"connect":0,"send":0,"wait":292,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T04:51:49.879Z","timestamp":1790657509879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:50 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-147c\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5244,"size_decoded":2099,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"0fa1a6b705b1cf63500c4dc9cbe5b264","sha1":"fc1770e6339802c64e1cc0ce10a95598bfb5ba42","sha256":"35780cfd4b3046829327778792f7176288060d511ba490f4e71c69f71bff04a3","sha512":"ab388792f421e5afb410abb5aadce90ed4a46bf25df0aa68654d6725e76a2badf6745122cf2b7c9d991ad29d5cfdf1362ea0cd9ba27772c36d792a4f21c88917","ssdeep":"96:Tr82/c5yKuc67udV6ZVF/Pdqr6TCZydHRH/g22mUsGKAiowGpuB1niHriHFH/w:TFUL67XFMZCxfP2nfD3bpuB1niLilfw","tlshash":"a4b160b25cf0d82a2355052bebebf0089f6255a385195814b1dc80ed8fe4fe5c8d7bb4","first_seen":"2026-09-29T04:48:56.060845Z","last_seen":"2026-09-29T04:53:16.004927Z","times_seen":4,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":2,"connect":150,"send":0,"wait":149,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-05d2f786.css","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:50.615Z","timestamp":1790657510615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/index-05d2f786.css HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-4acd3\"\r\nexpires: Tue, 29 Sep 2026 16:51:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306387,"size_decoded":66861,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"88568edd0ee35ad23861b3548eb04fe7","sha1":"87bc28e84d02692355b8489e5d7b3a04aff4a6f3","sha256":"05d2f78674d36ea25b0d8f88e1a38f5e7ce4629481f88ab39c572b8bd819f98d","sha512":"3689efbcddf9771d97d44c7ecddd5e222d610a3595c82c19c9553197779fef0e57afbb3edc70b33ea95b747333f5783dd3304e456523507e94175e3df1c980d7","ssdeep":"6144:nevxsaTJ03EkZ8w71ZACkFDS3vyf58rBeV05T5:ev1+3dZ8w71ZACkFDS3vyf58rBeV05T5","tlshash":"0554d6a9a590117c6f27aa759bce5ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2026-06-18T15:46:55.823345Z","last_seen":"2026-09-29T04:53:16.020668Z","times_seen":12,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/resource/svg/light/mengbanzu12.svg?2.0.1786012398636","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.372Z","timestamp":1790657513372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1786012398636 HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\netag: \"6aade89a-322\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802,"size_decoded":1074,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-10-04T06:39:22.651479Z","times_seen":1120,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hashkxjts.com/link.jpg?2.0.1786012398636","fqdn":"hashkxjts.com","domain":"hashkxjts.com","tld":"com"},"ip":{"addr":"104.21.93.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.430Z","timestamp":1790657513430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hashkxjts.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 14:11:51 GMT","end":"Sun, 22 Nov 2026 14:11:50 GMT"},"fingerprint":{"sha1":"D3:74:71:DD:CB:DE:85:8B:5E:11:03:81:83:1E:06:9F:58:3B:8F:17","sha256":"BA:E8:63:61:8A:9D:16:B9:55:8B:8B:70:C7:C7:63:90:1C:24:88:40:0C:82:24:6D:B1:FE:DC:D4:68:9C:8E:A2"}}},"request":{"raw":"GET /link.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: hashkxjts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Apr 2026 14:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0c8e8-4afe\"\r\nexpires: Thu, 29 Oct 2026 04:47:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4KKVdMNfsnwYda9UZuclU%2B4izX%2F%2F57dXw4rsin0uPDWpCHWc3Lw29vJ9Ypqy74qUfigajUwP%2Bbku0V20Qj8%2BqGkgjT9KDRKK7wDzRa0njV9m8Fmk7SfeZdgBw15mAmb\"}]}\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4286012f8bd56c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19198,"size_decoded":19390,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"bd1678707e6e3c21bfc20f0e60dd5760","sha1":"3c2166c1eb5b7457b0e802ff77e4b61a3c0793b0","sha256":"230def0f63a82232ecf8bfd3fcc75ed5ec77bdbc715ccef7a9f30d6f4aecef02","sha512":"bd5f84228b069624c916137d367aa2d6e9975c9ede3c55167614ac07e692db67cc606334e3d5dad0e4b69dd0dab7a3a65e4b00a0a556dbeac36f7c3be2bb26fb","ssdeep":"384:ADVyfTRKjNwLPKmT/z+AIMsVCR/fNCT2XqvKLlCtOXV2Yf:mgTRcNwrKgDBga6vKAn4","tlshash":"f582d0ca22172b1fd574e43a1331aa50522bb743a4d655e97066864bb43f3f9bc2fc07","first_seen":"2025-06-19T02:24:45.818803Z","last_seen":"2026-09-29T05:15:58.713717Z","times_seen":12,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hashkxjts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_yfi.webp?2.0.1786012398636","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.431Z","timestamp":1790657513431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_yfi.webp?2.0.1786012398636 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15086\r\ncf-ray: a4286012fccdb4f1-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 238\r\ncache-control: public,max-age=86400\r\netag: \"2f7b9cf3538c5bdaa1ea95c975ce15d2\"\r\nlast-modified: Tue, 03 Mar 2026 01:47:03 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=aeU.MJ3lkPyx_CL2e4LEad1DA0zB.csFkRmSy60dHaI-1790657513.4360309-1.0.1.1-x_QQGxfuYn7SpykT..7W0vUALnmBdUk1qT_JxbzimKL6uyPrdbFzKsMl.7ueau9BBcvD.0K7v.ocqKQunFlMUoXss1Vzr.GVyLsjaMUk8Fkv3fZi2d1gaejG5QL8MyhA; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"aeU.MJ3lkPyx_CL2e4LEad1DA0zB.csFkRmSy60dHaI-1790657513.4360309-1.0.1.1-x_QQGxfuYn7SpykT..7W0vUALnmBdUk1qT_JxbzimKL6uyPrdbFzKsMl.7ueau9BBcvD.0K7v.ocqKQunFlMUoXss1Vzr.GVyLsjaMUk8Fkv3fZi2d1gaejG5QL8MyhA","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:21:53Z","raw_expires":"Tue, 29 Sep 2026 05:21:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=aeU.MJ3lkPyx_CL2e4LEad1DA0zB.csFkRmSy60dHaI-1790657513.4360309-1.0.1.1-x_QQGxfuYn7SpykT..7W0vUALnmBdUk1qT_JxbzimKL6uyPrdbFzKsMl.7ueau9BBcvD.0K7v.ocqKQunFlMUoXss1Vzr.GVyLsjaMUk8Fkv3fZi2d1gaejG5QL8MyhA; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":15969,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2f7b9cf3538c5bdaa1ea95c975ce15d2","sha1":"d4c3de4d13c267563b6472e0b0a1e4c30402fcde","sha256":"c5ff67b2363b96bd09f8c6eba4bad64b4a0f58e64be284a93f42d39189025ec5","sha512":"3572fc7b8c636d3ad23d7373899b03dd4cadcc5a9681d80f8d0eb3a9ac1061c3ad7cffbd1c11e2e619e852f9b48852c541349b139ae6546d1196b525642a251d","ssdeep":"384:Y+mzRPplwLM6IMqq5zNHqfYZKAlkaW+rkXhqpj8WeE:5mlfwL+sB0wZKAlk1fqF8XE","tlshash":"e962d00cc59292f349e6c115ecc5821390ec72a4496fbf34a5fc9986713ae9edda0e54","first_seen":"2026-07-17T15:22:26.635325Z","last_seen":"2026-09-29T05:15:58.711627Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/platform/dev/144.png?2.0.1786012398636","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.512Z","timestamp":1790657512512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /platform/dev/144.png?2.0.1786012398636 HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-05T07:36:09.975346Z","times_seen":565405,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/resource/svg/light/kefu.svg?2.0.1786012398636","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.379Z","timestamp":1790657513379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /resource/svg/light/kefu.svg?2.0.1786012398636 HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-546\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1350,"size_decoded":953,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfd8777e67e5a46e9ec8e783f1ada84c","sha1":"171e714c3b6bbf87ba8d18dc521a6c6e563dd90c","sha256":"f415164b3e974e5b053810e42dfc96e313dae51dac33fb1a70b0022c72412b35","sha512":"c5000e1d6c89d1d20a3a4bc37f55907ff8e6d425b33b3cbdbbbbb7585a16802b354531dcbc2e6534013faa06e97e4ebf9a4935a3a3178d113c0bff4adbf6c56c","ssdeep":"","tlshash":"cc218a3f031686aed1c06b9887c25a4c173ce222f0b541d877935b666c149bb95bcd72","first_seen":"2025-12-29T08:09:26.765016Z","last_seen":"2026-09-29T04:53:16.002246Z","times_seen":19,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hashkxjts.com/sol.jpg?2.0.1786012398636","fqdn":"hashkxjts.com","domain":"hashkxjts.com","tld":"com"},"ip":{"addr":"104.21.93.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.402Z","timestamp":1790657513402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hashkxjts.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 14:11:51 GMT","end":"Sun, 22 Nov 2026 14:11:50 GMT"},"fingerprint":{"sha1":"D3:74:71:DD:CB:DE:85:8B:5E:11:03:81:83:1E:06:9F:58:3B:8F:17","sha256":"BA:E8:63:61:8A:9D:16:B9:55:8B:8B:70:C7:C7:63:90:1C:24:88:40:0C:82:24:6D:B1:FE:DC:D4:68:9C:8E:A2"}}},"request":{"raw":"GET /sol.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: hashkxjts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Apr 2026 14:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0c8e8-250a\"\r\nexpires: Thu, 29 Oct 2026 04:47:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bz6qbS%2BUMgvDUlCPzVLy5T0xRyEriNXoDOKu0FvxITqy8YtvvY0udttUR5DAGZE5jXBRXiHDiejXqFCwxQE6NdHIeKhK6gnQ1b9vu2RGeFzK%2FQL5z8yq7BAy4ESe10yf\"}]}\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4286012e8b856c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9482,"size_decoded":9534,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"71a6dc304437a39b5379d9788799425d","sha1":"b56fa05ea6bebf2e2a975904d2353f47b02bae07","sha256":"7154615d3429ac6e3ccc6dfe1388495d0d294e7788684dfeb99db6392dc67f4d","sha512":"9de379ac28b41b3799b2ac9590565859e87f6007a81b4477faa7edda2db524db855f2fd60d0237ef12f1c0ce3d3599d108a34a7de27cec7f19cd3e0738c99032","ssdeep":"192:TKrB7smug7UDrMcekppVYj61nFEW7De7Vmvrk1nDg0D0vjXZ:T8F4pMj67EmOOrk7cZ","tlshash":"1a12afd43f5acf2bed7221755ccc54dd1a238e6cd3696677c74054e013272e4ad18d46","first_seen":"2025-06-19T02:24:45.840742Z","last_seen":"2026-09-29T05:15:58.760994Z","times_seen":14,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hashkxjts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.phoenixdexjt.com/api/common/getMt5Amount?coin=xpd","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.087Z","timestamp":1790657513087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://phoenixdexjt.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://phoenixdexjt.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oms%2F9ESuoQu6z1nyopbaH9VlV7AHDqutrvel5%2FwY7nHBD7btb1GW7FTb3d1JYz0YwKLgzdemnb0trTvVguaXl6C3AAOvBgKGCSw%2FVUuKJrj2D82Sy9BTPEbnLuiuSlbyUyGhT5aYmmI0GA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a4286010ccc8b517-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":944,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_ldo.webp?i=kds?2.0.1786012398636","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.412Z","timestamp":1790657513412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_ldo.webp?i=kds?2.0.1786012398636 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8332\r\ncf-ray: a4286012fcccb4f1-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 238\r\ncache-control: public,max-age=86400\r\netag: \"73171e791c3e48300238d6efe18c9104\"\r\nlast-modified: Tue, 03 Mar 2026 01:44:16 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=ldx5PShCBdZU5KbwiuboIVe1nY5Dsaxy1ijmRg8m1YQ-1790657513.4359102-1.0.1.1-0yVIzBngrYqqElHwB6O7AkdyytpE8m48_RHo3dDeTCroRR2Yx8KeK7Lk7teaexG64TzKk3DwfFGQf3OwSdt1amZI4hrhFzzAJf7KGlhsIowPzhBtgkUwmTCwB__p7GoF; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"ldx5PShCBdZU5KbwiuboIVe1nY5Dsaxy1ijmRg8m1YQ-1790657513.4359102-1.0.1.1-0yVIzBngrYqqElHwB6O7AkdyytpE8m48_RHo3dDeTCroRR2Yx8KeK7Lk7teaexG64TzKk3DwfFGQf3OwSdt1amZI4hrhFzzAJf7KGlhsIowPzhBtgkUwmTCwB__p7GoF","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:21:53Z","raw_expires":"Tue, 29 Sep 2026 05:21:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ldx5PShCBdZU5KbwiuboIVe1nY5Dsaxy1ijmRg8m1YQ-1790657513.4359102-1.0.1.1-0yVIzBngrYqqElHwB6O7AkdyytpE8m48_RHo3dDeTCroRR2Yx8KeK7Lk7teaexG64TzKk3DwfFGQf3OwSdt1amZI4hrhFzzAJf7KGlhsIowPzhBtgkUwmTCwB__p7GoF; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8332,"size_decoded":9214,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73171e791c3e48300238d6efe18c9104","sha1":"8761c1fcbeffd440ad46ff524e4d0009e4042391","sha256":"3c33302b05e46c79afddd51f5add6751ca30b72993c2b960446cd8476324884e","sha512":"1d0a935384c8728b8f6d84e62f8d8685522eb00aeb73a7d57be9e07a528fa5c07dfe99f2abfb7cd0ec485e11e188768f2581d82796d918b572e9def63da412f3","ssdeep":"192:n89NAY5SmzbZ0KPwnsBLiykAc2/9b8gfFw6Z0JLhbe9lCuIIU:s+mzRPnbdc48gfFw6ZyR6CuIIU","tlshash":"2d029f1dc3604ef27ab94852b5088477523d90105577da3a91adfa5b7c2fc0a6c7a7f0","first_seen":"2026-07-17T15:22:26.63917Z","last_seen":"2026-09-29T05:15:58.755647Z","times_seen":13,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":24,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_avax.webp?i=kds?2.0.1786012398636","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.429Z","timestamp":1790657513429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_avax.webp?i=kds?2.0.1786012398636 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8696\r\ncf-ray: a4286012fcc7b4f1-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 238\r\ncache-control: public,max-age=86400\r\netag: \"d4c32cdcbbe93620061421c9dea94fb5\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:07 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=B.v6TRX_7wkCidQ1E_o08MicIRbaWd.yKvn5_K8ee5Y-1790657513.4340084-1.0.1.1-eQEQMsznjnOz12DcZEQA5bksXI7iq9ohR_QGm3oDqbsaClts43XkeMaZmiqY0DTJZ_rAIW1E7vqY8JAwf.ZAVCmywNES2ZZOSncCrqQWPr2j9okCa41z09ZtdgM3IY55; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"B.v6TRX_7wkCidQ1E_o08MicIRbaWd.yKvn5_K8ee5Y-1790657513.4340084-1.0.1.1-eQEQMsznjnOz12DcZEQA5bksXI7iq9ohR_QGm3oDqbsaClts43XkeMaZmiqY0DTJZ_rAIW1E7vqY8JAwf.ZAVCmywNES2ZZOSncCrqQWPr2j9okCa41z09ZtdgM3IY55","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:21:53Z","raw_expires":"Tue, 29 Sep 2026 05:21:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=B.v6TRX_7wkCidQ1E_o08MicIRbaWd.yKvn5_K8ee5Y-1790657513.4340084-1.0.1.1-eQEQMsznjnOz12DcZEQA5bksXI7iq9ohR_QGm3oDqbsaClts43XkeMaZmiqY0DTJZ_rAIW1E7vqY8JAwf.ZAVCmywNES2ZZOSncCrqQWPr2j9okCa41z09ZtdgM3IY55; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8696,"size_decoded":9578,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4c32cdcbbe93620061421c9dea94fb5","sha1":"86b7d8bfcadcf29dc15e04ac27c6fde87dff4037","sha256":"d8e22a4ffaddf6d0ac9a800f58e91a0568b42b7b950ed433acab3e6b54d298d1","sha512":"7e689ce4701f9b7934003689d6365157b34be9be1f94d216df6ffe458179c4428740f75fe17d2575acc0d33fd9ffc680924eee33396bbb2141d3ab044221cf3b","ssdeep":"192:e89NAY5SmzbZ0KPwumFLowvjvYXYN6G+jqe7R0q3YShNSGwp:T+mzRPNi7d6lNYwNSGwp","tlshash":"5102bf17c5a6e7b51e48c4a70c40942fc33a9020694fad28534c9c5bb33dfeeddb1899","first_seen":"2025-09-18T10:45:14.114732Z","last_seen":"2026-09-29T05:15:58.726154Z","times_seen":17,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpf32ba91f651d41449ff5e5950b1c3ad6.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.441Z","timestamp":1790657513441,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpf32ba91f651d41449ff5e5950b1c3ad6.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 112629\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EA6AFD363833250B9A\r\nAccept-Ranges: bytes\r\nETag: \"0DAEADD93DED6B3C5DE34CB17C18387C\"\r\nLast-Modified: Tue, 08 Apr 2025 17:28:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13231990931681428578\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Da6t2T3tazxd40yxfBg4fA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":112629,"size_decoded":113206,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"0daeadd93ded6b3c5de34cb17c18387c","sha1":"17c2516cf0fe410cbf3abd29efe0081359ad0a1e","sha256":"be91fd0aa507b5779e9a0b38fabcc784536965a9f20bc1444343e584049d7e25","sha512":"882a4ef0f7d72e4903e51978ebcd7cbcbf3ab1f41ca7ede53212588e1c88db37e0b2d393fa0edc27ae63c7d4d9d910d845eaf88612ed3928038f68ea1d97f5fc","ssdeep":"3072:e0WEjagrkdEB58/3MQDPQiktwaKqAUkS61dm3LcL:e1sku4/3MLipa0IJI","tlshash":"61b302f2a3306546e0bd4570a3e69f7d875f0eb65046c5733829df7684060c4caabaeb","first_seen":"2024-08-29T18:12:05.895827Z","last_seen":"2026-09-29T05:15:58.714291Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1643,"timings":{"blocked":1049,"dns":0,"connect":0,"send":0,"wait":282,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp15ee59b05cb14108be51f835493c2c0e.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.446Z","timestamp":1790657513446,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp15ee59b05cb14108be51f835493c2c0e.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 126395\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EBEE24003231070C0B\r\nAccept-Ranges: bytes\r\nETag: \"5021CD447181A2BE27D8B8A3CB9F7D1E\"\r\nLast-Modified: Tue, 08 Apr 2025 17:31:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5244213128299386486\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: UCHNRHGBor4n2Lijy599Hg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":126395,"size_decoded":126971,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"5021cd447181a2be27d8b8a3cb9f7d1e","sha1":"01db3e026290149b3915861cc952eb8915a79eb4","sha256":"ce03288d7b5b2b5d23b4f17af76cb32d388cf921994dc73b4e32238d92aa5661","sha512":"98a159f1a672c22949f4e3b9adfaa4c1e7f48332100a2b4b47c42e323930cddbe1121b7bb6a506f4fe0b47fa66902344e44751fac1501ce77cf3dac4ff949a1d","ssdeep":"3072:mSs4NUd6Tvdf7hl8rzU6CveFFT/W8F7/GnKrtHvrLS:6OTvdrYU6CvQF7W8FLXRPy","tlshash":"e7c31273d55abc9be35c8b39e0e7842a387631092a4a757d8526cd3b104863b0fa1ed7","first_seen":"2024-08-29T18:12:05.898154Z","last_seen":"2026-09-29T05:15:58.757713Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1916,"timings":{"blocked":1545,"dns":0,"connect":0,"send":0,"wait":282,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_trb.webp?2.0.1786012398636","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.414Z","timestamp":1790657513414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_trb.webp?2.0.1786012398636 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6902\r\ncf-ray: a4286012fcceb4f1-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 238\r\ncache-control: public,max-age=86400\r\netag: \"16b15363ca61be1848bc3bf9231b0e1a\"\r\nlast-modified: Tue, 03 Mar 2026 01:46:21 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=Frn4A_XmJPlfPxGf8rXTljiM8ApqVxnC0yAWM9Vq.O4-1790657513.4365528-1.0.1.1-srZXnNkcv07Zx3uyVHLDXdyqGeEef3a54OLgo3VBkJO19EAR8qB684nsI8eHUlT8GqP331v7Wt5wgXF5oca_eWafuG3yDoyik3a9NQ9dbF2fiUJFA3kC0UbBHW1Q5x_u; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"Frn4A_XmJPlfPxGf8rXTljiM8ApqVxnC0yAWM9Vq.O4-1790657513.4365528-1.0.1.1-srZXnNkcv07Zx3uyVHLDXdyqGeEef3a54OLgo3VBkJO19EAR8qB684nsI8eHUlT8GqP331v7Wt5wgXF5oca_eWafuG3yDoyik3a9NQ9dbF2fiUJFA3kC0UbBHW1Q5x_u","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:21:53Z","raw_expires":"Tue, 29 Sep 2026 05:21:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Frn4A_XmJPlfPxGf8rXTljiM8ApqVxnC0yAWM9Vq.O4-1790657513.4365528-1.0.1.1-srZXnNkcv07Zx3uyVHLDXdyqGeEef3a54OLgo3VBkJO19EAR8qB684nsI8eHUlT8GqP331v7Wt5wgXF5oca_eWafuG3yDoyik3a9NQ9dbF2fiUJFA3kC0UbBHW1Q5x_u; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6902,"size_decoded":7784,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16b15363ca61be1848bc3bf9231b0e1a","sha1":"ab8571306d7a640bfc9203226b02b2a852b09859","sha256":"f54b15562cc3d76f34afb8412762786db73f38e8f2097eb7b523ffdae0e80d27","sha512":"6e73444c3f3beae399a652178992f8c48733be3260e10c71464fcbc379868fc04f5889d9653bfaea5a4f76b1fa72db44016835a039f4fe82d30fe90e6c00ea43","ssdeep":"192:gK89NAY5SmzbZ0KPwqErZzjfv125tyoup3VaoZfC:gv+mzRPBwv+tyL9C","tlshash":"d6e1af54c2e563d326e4c5c3b454681fa61c002a1157672bb692ce333b4dcde6d795fc","first_seen":"2026-07-17T15:22:26.631271Z","last_seen":"2026-09-29T05:15:58.718485Z","times_seen":13,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":22,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp72fe870f6d404fffb20fa1662b9f5e94.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.352Z","timestamp":1790657513352,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp72fe870f6d404fffb20fa1662b9f5e94.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3770\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EAB1E8233231FE9314\r\nAccept-Ranges: bytes\r\nETag: \"AC57F69A059B27E9B7E2D71F7B556AF6\"\r\nLast-Modified: Tue, 08 Apr 2025 17:33:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14146020860961096738\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: rFf2mgWbJ+m34tcfe1Vq9g==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3770,"size_decoded":4345,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"ac57f69a059b27e9b7e2d71f7b556af6","sha1":"1af6532d57f9c61f890786bf897ec556ed11a9d0","sha256":"8cb942606d3bbf90682e4e49d691e1b5e761309e17d2b4451f34c10071a41d9f","sha512":"05566aebfddbc7a582225c09246c248c8f1c810b9aa1f40d3bb3fb17afd1d45e55f79e43e40a6ed2dd9c2d0dfbb76ccd8d876e74e16f576be438878326d22896","ssdeep":"","tlshash":"3d715c76d6f5786d9e5d516e12f0771be09eb11831d42341a71b5081382bfa43bb8e07","first_seen":"2024-08-29T18:12:05.864836Z","last_seen":"2026-09-29T05:15:58.768964Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1143,"timings":{"blocked":-1,"dns":24,"connect":278,"send":0,"wait":281,"receive":0,"ssl":559},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/resource/svg/light/mengbanzu13.svg?2.0.1786012398636","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.375Z","timestamp":1790657513375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1786012398636 HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-4b2\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":894,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-10-04T06:39:22.645616Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_atom.webp?2.0.1786012398636","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.422Z","timestamp":1790657513422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_atom.webp?2.0.1786012398636 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9980\r\ncf-ray: a4286012fcc8b4f1-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 238\r\ncache-control: public,max-age=86400\r\netag: \"f4d34faf5f6630f083bd36debe47511c\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:06 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=U2.EOS_CZYOZvL3Cvb.5B66iC91Tp8z_WsMlkpiQtkU-1790657513.4342682-1.0.1.1-vNBxgyD9wPB_oLZtRRIrDKrAovrYY_N0cdQBINuHQgUh1MM56NQUMKXun1TqYtT7xvAMIjSYJlPEmIpyFpNDd1jfl4B._MPRKp3gMttOQfU4wtClHO9.KJsjGniVYQi8; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"U2.EOS_CZYOZvL3Cvb.5B66iC91Tp8z_WsMlkpiQtkU-1790657513.4342682-1.0.1.1-vNBxgyD9wPB_oLZtRRIrDKrAovrYY_N0cdQBINuHQgUh1MM56NQUMKXun1TqYtT7xvAMIjSYJlPEmIpyFpNDd1jfl4B._MPRKp3gMttOQfU4wtClHO9.KJsjGniVYQi8","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:21:53Z","raw_expires":"Tue, 29 Sep 2026 05:21:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=U2.EOS_CZYOZvL3Cvb.5B66iC91Tp8z_WsMlkpiQtkU-1790657513.4342682-1.0.1.1-vNBxgyD9wPB_oLZtRRIrDKrAovrYY_N0cdQBINuHQgUh1MM56NQUMKXun1TqYtT7xvAMIjSYJlPEmIpyFpNDd1jfl4B._MPRKp3gMttOQfU4wtClHO9.KJsjGniVYQi8; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9980,"size_decoded":10862,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4d34faf5f6630f083bd36debe47511c","sha1":"6cf79264ea55ac6fe91c0dcbed2f75022ec617a4","sha256":"b78b80977f1ef44225acf5970c668ded7d8520256fe79d7031438c496e7fef7c","sha512":"05fe5f22535dc794f24d420a82f2047fbbafbaee01d28b323f86e23473fd3779ea57ebbccb317a010a1a193726371307da90f28cdaf22371be951df2371885e0","ssdeep":"192:CJ0Xcmq1Y7qmpcWZ5o7TdWx8Q0z1YD7fs9eb+U7eMKdq5Ohb2cefEbIknT:G0Xhqu7qmp3GTdkD0z3UaMT5O5QOTnT","tlshash":"9122bf2de2c234009cd24c464ce5f45f6955c5c6a12288f7bec1c78285b90dbef4aaea","first_seen":"2025-11-22T22:43:38.945794Z","last_seen":"2026-09-29T05:15:58.747969Z","times_seen":38,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-ef65dd47.css","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.018Z","timestamp":1790657512018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/index-ef65dd47.css HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-d54\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3412,"size_decoded":1240,"mime_type":"text/css","magic":"ASCII text, with very long lines (3411)","md5":"7fd79e5e12f621e5803a47d2230e01b1","sha1":"449f8edbff6c22d0c16044beffaa53eac6a522a9","sha256":"ef65dd47649980a3f297f85d3a18d8f4d872971fed761aceb721922241367db9","sha512":"440ec0cab51c5e3527e2afac1c72f605157e5cbb164f6ccd15a4b85eb8b979e87aa56a125ee451d2ba5c22f812504aba299386897d2b0fb89cf380cc0a78c87f","ssdeep":"","tlshash":"9061020ef39d22359d37d5cb5d5c5bcc80102fa2f40aadf6e847972a19cfad326a1119","first_seen":"2026-06-22T17:10:55.691063Z","last_seen":"2026-09-29T04:53:16.013293Z","times_seen":16,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.phoenixdexjt.com/ws/8be9a7e2-1498-43d9-8aa0-95fabe5a4dea","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:51.996Z","timestamp":1790657511996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"GET /ws/8be9a7e2-1498-43d9-8aa0-95fabe5a4dea HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://phoenixdexjt.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: G8tQY2BvLVMAul20sIip4g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 29 Sep 2026 04:51:52 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://phoenixdexjt.net\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: GUbJB/To1LRfN0A04TT/ShqAQmM=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FdtiykgGvMO99vEjH2p3FlqmB5dn7Yk%2BOMqFGYQAOKFKyTOLexG%2FlspYJW%2FtnYoIr2aPeDhqfx8aVQ9RfsRsu2yf81dZR3wZPxp8AflykhmkXkzIDQrJTXBwW29d2aoSgSa%2BhHJgzOgqw%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a428600a2ced0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":897,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":22,"connect":21,"send":0,"wait":714,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-bc011be9.css","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.016Z","timestamp":1790657512016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\netag: \"6aade89a-18d\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":734,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-10-04T06:39:22.607763Z","times_seen":1633,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpf9890e666df54565ae682be531012c08.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.370Z","timestamp":1790657513370,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpf9890e666df54565ae682be531012c08.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2467\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EA8B904432362F59C8\r\nAccept-Ranges: bytes\r\nETag: \"E7769DC09F94AE578022F8221612BC48\"\r\nLast-Modified: Tue, 08 Apr 2025 17:43:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3717875445481473298\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 53adwJ+UrleAIvgiFhK8SA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2467,"size_decoded":3041,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e7769dc09f94ae578022f8221612bc48","sha1":"90f514b55b228f1a2e75b41fddf743ebb3c7d012","sha256":"1ff7c9a67232412db2343237ed0d10b4a91be674bc12d313271f8a0561310f82","sha512":"25e8eeb9005e5c5309f745d718167f29442c8ada411abbb45648d18a2e1d656a15e39739ca2f0702dc29e47e7cb342c29ec34d70c0224cbdfe7b01e8139e4110","ssdeep":"","tlshash":"6b513d4a82555123fbd8c77482cca9c804b503b954a92c942c369e86ee4ec75a75d19c","first_seen":"2024-08-29T18:12:05.880996Z","last_seen":"2026-09-29T05:15:58.770013Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1121,"timings":{"blocked":-1,"dns":7,"connect":276,"send":0,"wait":281,"receive":0,"ssl":556},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_iota.webp?2.0.1786012398636","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.420Z","timestamp":1790657513420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_iota.webp?2.0.1786012398636 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12388\r\ncf-ray: a4286012fccbb4f1-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 238\r\ncache-control: public,max-age=86400\r\netag: \"6314ddde307b63d87d9386e79a25c440\"\r\nlast-modified: Tue, 03 Mar 2026 01:44:00 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=QGwUdq8Kjg447w35h.I.enP8yhLENXGPfcNZ2r74y_M-1790657513.4351187-1.0.1.1-echRJ17B1lW2PSUtROOKOgHa13JOUxQSPgHKLyMiWcbxMnvftxXpnttqzgGizqHTTfsm2qZh1TlfqvYWOHd4_fp_hN5mmeXKVPZpmLRHeqTk4XAFPY5THy4VQf21Jw1N; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"QGwUdq8Kjg447w35h.I.enP8yhLENXGPfcNZ2r74y_M-1790657513.4351187-1.0.1.1-echRJ17B1lW2PSUtROOKOgHa13JOUxQSPgHKLyMiWcbxMnvftxXpnttqzgGizqHTTfsm2qZh1TlfqvYWOHd4_fp_hN5mmeXKVPZpmLRHeqTk4XAFPY5THy4VQf21Jw1N","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:21:53Z","raw_expires":"Tue, 29 Sep 2026 05:21:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=QGwUdq8Kjg447w35h.I.enP8yhLENXGPfcNZ2r74y_M-1790657513.4351187-1.0.1.1-echRJ17B1lW2PSUtROOKOgHa13JOUxQSPgHKLyMiWcbxMnvftxXpnttqzgGizqHTTfsm2qZh1TlfqvYWOHd4_fp_hN5mmeXKVPZpmLRHeqTk4XAFPY5THy4VQf21Jw1N; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12388,"size_decoded":13271,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6314ddde307b63d87d9386e79a25c440","sha1":"773a7debef0c9dbce49006c9218c878eb9294d50","sha256":"56ac72f9a1690a1319fa09aae8ecc28c10e47598b0ee24c82b541a89d1527fda","sha512":"f980fe41afb167824095e0b153781b3e4405777b05cb530f7f4705e3dc31d3605b2640ee7bc9df008a20ff6727218dd40947d87e597e3211c9a5abd07a82afc0","ssdeep":"192:/89NAY5SmzbZ0KPwO2TiFhnfxdFuki9PZs0kvV5uST5EjDzlAVU3IQcSyJAnGpDA:U+mzRP/2TehnbFb1fmjdAijWZG","tlshash":"1842c0718791b5a7bb3c8453a751c85a52872214840bac13f278cfb3a3dbb19ee70ed4","first_seen":"2026-07-17T15:22:26.576588Z","last_seen":"2026-09-29T05:15:58.724339Z","times_seen":13,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp55f53f107598465c8231e9a11cf3a29a.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.443Z","timestamp":1790657513443,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp55f53f107598465c8231e9a11cf3a29a.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109572\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EAAB67323838CEA94F\r\nAccept-Ranges: bytes\r\nETag: \"440CBE77674A730D672DE16899862FFB\"\r\nLast-Modified: Tue, 08 Apr 2025 17:30:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5053394575354269543\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RAy+d2dKcw1nLeFomYYv+w==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":109572,"size_decoded":110148,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"440cbe77674a730d672de16899862ffb","sha1":"8cf70e0ed50ce4ef8d0185d45abc121ee0525cae","sha256":"42d66c6c6f9483e678f137b9cd29c14c88bedf815dcb7454d7cd03160c923d6a","sha512":"4754244bc1be99df8f456441cefb8dc13787b841cd840b473f634ac78265ef613857dc6d1450908b5412cee5e6b7d09f16fbf31b90185914439e20746975221c","ssdeep":"1536:6GE8uzA+S4xqE83K7O5zETHz3TPFQ4Ix2xg/YuDQ9nTBZyX7+oz7dB5zQOXquOme:C9qUS0HXuz4kd71b5QBu7NQ","tlshash":"99b302108f94d7c8d7172f35469e8ad1befa14ad34036e972bfa490b2d5aa748c0cdc6","first_seen":"2024-08-29T18:12:05.89455Z","last_seen":"2026-09-29T05:15:58.698569Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1670,"timings":{"blocked":1043,"dns":0,"connect":0,"send":0,"wait":306,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp2ca546ee44044beea5878aabc5a8183d.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.444Z","timestamp":1790657513444,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp2ca546ee44044beea5878aabc5a8183d.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 239195\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EBAB67323838DCAA4F\r\nAccept-Ranges: bytes\r\nETag: \"6AF00FF8B88B635BCFAE7B63FB73F63E\"\r\nLast-Modified: Tue, 08 Apr 2025 17:31:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18217933153706741951\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: avAP+LiLY1vPrntj+3P2Pg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":239195,"size_decoded":239772,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"6af00ff8b88b635bcfae7b63fb73f63e","sha1":"c7c004eb309b3f3fd26a7e1e2654a7956de69f1f","sha256":"71522f2099167c896b3d5ab5d90391404a7c870cfdfa6f383a814f7d1af1fad1","sha512":"04203c46cb2ad1412789250d169a6affccc40bf85f04e7c88c756163fb647519b1477876f46fae6e386658aff21f8e70b7cc64f1745754da5e435eac8aef866c","ssdeep":"6144:UnE2BVTNiD//GLbVrXKO9w4tGZz1UVf9URf:UE2BBE/GLbIO9dt+GgV","tlshash":"a3342314d580e5e1c6b1833a59efa267b35f307cb3a20d7768e45533cbb8aa1ab10f51","first_seen":"2024-08-29T18:12:05.907057Z","last_seen":"2026-09-29T05:15:58.699792Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2320,"timings":{"blocked":1669,"dns":0,"connect":0,"send":0,"wait":306,"receive":345,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/resource/svg/light/zu29.svg?2.0.1786012398636","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.377Z","timestamp":1790657513377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1786012398636 HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\netag: \"6aade89a-348\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":1112,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-10-04T06:39:22.646459Z","times_seen":1052,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp60614724ddfc40fca556b61f55b30e3e.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.440Z","timestamp":1790657513440,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp60614724ddfc40fca556b61f55b30e3e.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 244944\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EB8B90443437025BC8\r\nAccept-Ranges: bytes\r\nETag: \"99541A4058432FC8B2DF9AD26D6EEE3B\"\r\nLast-Modified: Tue, 08 Apr 2025 17:29:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11562487344152512719\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mVQaQFhDL8iy35rSbW7uOw==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":244944,"size_decoded":245521,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"99541a4058432fc8b2df9ad26d6eee3b","sha1":"689593ccf0b44704b19aa67f8d43c204801d5975","sha256":"be4ff66527bf4e4a48af64fa49481b6cca9864d9afe563630744a2204d7ecc94","sha512":"d67de09d3b9313f66a0513fd8a322362b3c2b6ad26466e687e81540a59e5ca9769d60ad33508047e08aa7cad9f1d70c71eb9beea508fd5cffdc67ae1d0ba7193","ssdeep":"6144:gRGn1e5WwkyFUwG1oChc+UBO95+eHQ+cBKVkeJLWd1H1f7POv:De5laHdJmO95+bObJLWdTjm","tlshash":"9134230ba890a155f8e07f5328dd5db719aa385ff7c8b158c49ea4e93522314fc7af02","first_seen":"2024-08-29T18:12:05.90357Z","last_seen":"2026-09-29T05:15:58.706871Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2244,"timings":{"blocked":1650,"dns":0,"connect":0,"send":0,"wait":294,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/charting_library/charting_library.min.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:50.609Z","timestamp":1790657510609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-2a6b\"\r\nexpires: Tue, 29 Sep 2026 16:51:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10859,"size_decoded":3537,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-10-04T06:39:22.605211Z","times_seen":7403,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/currencyItem-7c3b2c6f.css","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.025Z","timestamp":1790657512025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/currencyItem-7c3b2c6f.css HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-6d6\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":846,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"bd623c12df11965488fe6d5dc9c7aaf9","sha1":"c4e21267c80bae00313247fdbf583347f29698e6","sha256":"7c3b2c6f693030e5809e8da416f386fdd83af825c26096ed05d2c8255c1e1844","sha512":"94428b0b30b7c97751ccb7dadb6f64fc0662459004a5f78346797d6f15dd62595d875eec495336886967ec024aefad91de5f1aacda414d5f7ebf788b1370533b","ssdeep":"","tlshash":"ee317b94521a0775de37d8aaeee8014490543b81d01755caec8b8b371cdbab31b60e6b","first_seen":"2026-09-23T15:54:56.999379Z","last_seen":"2026-09-29T04:53:16.034141Z","times_seen":9,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/en-a4f17212.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.100Z","timestamp":1790657513100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/en-a4f17212.js HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-abe8\"\r\nexpires: Tue, 29 Sep 2026 16:51:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44008,"size_decoded":13795,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (43821)","md5":"0f1ba69b7314cfcc76085620d6e5ffac","sha1":"6506ade982423e83ae1b3cb3e9c800fece6d1991","sha256":"9cffb92f8ea905a9b51425b80216c7028441969523947d02b65324c989ef3149","sha512":"71f4fa964deb3fd41c0f2025de2c1a92a57c08a7165f3e70bf7c859746ff86bf9b25d0fbe440a5955704cd8e489ac2ead6cfcdaa402ab75cdc4c7f51c8aca8a1","ssdeep":"768:JY/4tZcEw/o7rKOdAgPsifnAMCHrAaAMEVoP6+6sPG9q1mwO6fpk7aOLxI:JwponKOdzbEHrdEVLsPWqqLxI","tlshash":"5113c7897e1a889a04f3636774ce6e2024f50ac18255841f4fedc9fd53d2b67b3a7728","first_seen":"2026-09-23T15:54:57.03805Z","last_seen":"2026-09-29T04:53:16.016801Z","times_seen":9,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hashkxjts.com/btc.jpg?2.0.1786012398636","fqdn":"hashkxjts.com","domain":"hashkxjts.com","tld":"com"},"ip":{"addr":"104.21.93.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.381Z","timestamp":1790657513381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hashkxjts.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 14:11:51 GMT","end":"Sun, 22 Nov 2026 14:11:50 GMT"},"fingerprint":{"sha1":"D3:74:71:DD:CB:DE:85:8B:5E:11:03:81:83:1E:06:9F:58:3B:8F:17","sha256":"BA:E8:63:61:8A:9D:16:B9:55:8B:8B:70:C7:C7:63:90:1C:24:88:40:0C:82:24:6D:B1:FE:DC:D4:68:9C:8E:A2"}}},"request":{"raw":"GET /btc.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: hashkxjts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Apr 2026 14:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0c8e8-4907\"\r\nexpires: Thu, 29 Oct 2026 04:47:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x77yxxm7MFt%2BpWAOgBa5SBcjohbv71x2PkwGEB86Xee97vB6iHnxxRhOGQiyWbIVo3HXBEcKbTvtY91AnWOAO5U13BGhHKPt2u%2F%2BIyZVtScWV4tr3Smg9as2ahdkv4dN\"}]}\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4286012e8b556c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18695,"size_decoded":19176,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e0bd679cd8e0e47b99f9a57e1630eab9","sha1":"84f1e2c0677e05aaf4eeca35b082d45b918cd173","sha256":"6e66685f018712ad59cd51776efe995ce8e2de1e54b5284b64a7c5ccae9619f2","sha512":"8762c700d86a07d203379f83ee795016a83f22a858026e42ae5af47d87bad7f023196abf5b2c57282a461b5158a8081a189765580d29561ab34b58a936941aa9","ssdeep":"384:oa8lUgPlQEKkx9BM6eHr0JaxCHsC/jWdEti7b8Jmn3qCmPBvEip24:ozlZ9NKW9BMv+/jWdEts8Kmzh","tlshash":"9782d0f3f91a61bfd87a03b94582bc26229b79e22b989d4d248015c84de88cc51d3d5d","first_seen":"2025-06-19T02:24:45.865315Z","last_seen":"2026-09-29T05:15:58.747362Z","times_seen":14,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":12,"connect":31,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hashkxjts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp65ce0857b9d24255a52a845abbb5ecb5.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.436Z","timestamp":1790657513436,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp65ce0857b9d24255a52a845abbb5ecb5.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 158333\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EA8B904434375859C8\r\nAccept-Ranges: bytes\r\nETag: \"BCF7364A8C40D33BDF433C04B622ED15\"\r\nLast-Modified: Tue, 08 Apr 2025 17:14:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11597926574612920846\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vPc2SoxA0zvfQzwEtiLtFQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":158333,"size_decoded":158910,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"bcf7364a8c40d33bdf433c04b622ed15","sha1":"0707d502e220ef4bae31d2f47a49cd7ab01b7ec8","sha256":"bca853b8b0cfaea97eb2ae60c122d04c7f294731b070d2ae7c8f6e88484cd3da","sha512":"d2012cae485fd4410b8c0ffe90a28a6ae00746acee0b2a4c7d15d060ce765817366c60e9c2711a514558cdc2a82f52e7c540a70dfe097cd0ee9c6229b99806f8","ssdeep":"3072:NbIOHcmiNEnjlOqcAVwF1yFktsnq/HniEj2foXt1q5VABND2cp0cQnU:xIOYqjlOqca2yMQqfzUVAnZQU","tlshash":"80f3122ea2f21941d64296b765617d630daee8072f41e12b68d03996c3323fc5f722d7","first_seen":"2024-08-29T18:12:05.897064Z","last_seen":"2026-09-29T05:15:58.750824Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1700,"timings":{"blocked":-1,"dns":0,"connect":278,"send":0,"wait":285,"receive":575,"ssl":561},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-1189a09e.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.012Z","timestamp":1790657512012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/index-1189a09e.js HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-3878\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14456,"size_decoded":4386,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (14439)","md5":"0ed82cb909a2fd09e41116ad6d054a4a","sha1":"82b7c6fc9fec740d60d24c0e84a32b2164f21870","sha256":"aacde004c72d892d84cf5f27beaf9081a024df7b8e92e1dcbbdb85b6a0528693","sha512":"d37e77194da91b961ec240e11fbb58f726fa1dac0c95c067785ccc3c8b1929bd4304c9f0914d639ede4eaa00537ce4443df993a4d024913a2c1385d9c79e3860","ssdeep":"384:pp0Bz/9qP822Z0re1FF9+fdIUDjJj5fMbPO5NvZZYoIWFVCjBJI4w5U:pp05sEfbPF9+fdi8UoIWFVCn","tlshash":"4b52b696f606da3df5b7d051848c0011361e7fde900c88a7b9be1d863356ff8bb59a18","first_seen":"2026-09-23T15:54:57.031895Z","last_seen":"2026-09-29T04:53:15.990979Z","times_seen":9,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.phoenixdexjt.com/api/common/getMt5Amount?coin=xag","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.080Z","timestamp":1790657513080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://phoenixdexjt.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://phoenixdexjt.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=COFeYpbXUQSfRAGAu05v0xTuf0ECErevvSEazThh1Ek8Bl6W2snKrHicnlQL2wmyIHqzI3CMvqwiyS1uivdxNbdvW8xdPnH%2FwTVlGCTc3u1Usmehp3RGIgUOk8e6%2BlZT%2BrJEku7ZfUyVGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a4286010ccc7b517-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":944,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_1inch.webp?i=kds?2.0.1786012398636","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.426Z","timestamp":1790657513426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_1inch.webp?i=kds?2.0.1786012398636 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14426\r\ncf-ray: a4286012fcc9b4f1-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 238\r\ncache-control: public,max-age=86400\r\netag: \"f8c1b5b96416c75f9d292d7825c2c001\"\r\nlast-modified: Tue, 03 Mar 2026 01:41:46 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=dyMRJgJvSnj_rW6DJNf9GXojRLzLn0BHDk2QEXE87iI-1790657513.4344482-1.0.1.1-oi3OyBMONcqmoXI1E_eNOUKKNKqGTq5ze0gEysIcozinBuEaPqrtwDRYf3fsUa1FdL1K8UvtdJplvmSgizo12ywqM04CCKnwo2aFeUxBAESxO5kcq3DepkXd.JsvjlsK; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"dyMRJgJvSnj_rW6DJNf9GXojRLzLn0BHDk2QEXE87iI-1790657513.4344482-1.0.1.1-oi3OyBMONcqmoXI1E_eNOUKKNKqGTq5ze0gEysIcozinBuEaPqrtwDRYf3fsUa1FdL1K8UvtdJplvmSgizo12ywqM04CCKnwo2aFeUxBAESxO5kcq3DepkXd.JsvjlsK","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:21:53Z","raw_expires":"Tue, 29 Sep 2026 05:21:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=dyMRJgJvSnj_rW6DJNf9GXojRLzLn0BHDk2QEXE87iI-1790657513.4344482-1.0.1.1-oi3OyBMONcqmoXI1E_eNOUKKNKqGTq5ze0gEysIcozinBuEaPqrtwDRYf3fsUa1FdL1K8UvtdJplvmSgizo12ywqM04CCKnwo2aFeUxBAESxO5kcq3DepkXd.JsvjlsK; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14426,"size_decoded":15309,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8c1b5b96416c75f9d292d7825c2c001","sha1":"1f53eb11053de7d0e6c7270028241466918032ae","sha256":"4df281b673997b2445044157226b8e31926a8a3d660975c47dcd3c716f2965e4","sha512":"936aac244952662383b5206f4d95ea2dc2eed7f47f0eb95b542dd3f44e5d84e02c105af75f6964e67f7bc460ac8adf164f7df620086b0380ad9e3d8ecc204c80","ssdeep":"192:589NAY5SmzbZ0KPwtSK9wAx9K03jSuZCyJ2Sz9oDmwXhVNKyuetFHrET1XLxGaD2:6+mzRPtAH3bZCyJ2KmDvfgZetVQF1D2","tlshash":"f152c018c1eb63b627700c73a740e27f89487111b18abc2d6b0feb976345d4d5f265a1","first_seen":"2026-07-17T15:22:26.64043Z","last_seen":"2026-09-29T05:15:58.748977Z","times_seen":13,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp2003369b08864f67a7bdbc3bd4f5e2d6.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.435Z","timestamp":1790657513435,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp2003369b08864f67a7bdbc3bd4f5e2d6.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 158333\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EAEE24003231930A0B\r\nAccept-Ranges: bytes\r\nETag: \"BCF7364A8C40D33BDF433C04B622ED15\"\r\nLast-Modified: Tue, 08 Apr 2025 17:14:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11597926574612920846\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vPc2SoxA0zvfQzwEtiLtFQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":158333,"size_decoded":158910,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"bcf7364a8c40d33bdf433c04b622ed15","sha1":"0707d502e220ef4bae31d2f47a49cd7ab01b7ec8","sha256":"bca853b8b0cfaea97eb2ae60c122d04c7f294731b070d2ae7c8f6e88484cd3da","sha512":"d2012cae485fd4410b8c0ffe90a28a6ae00746acee0b2a4c7d15d060ce765817366c60e9c2711a514558cdc2a82f52e7c540a70dfe097cd0ee9c6229b99806f8","ssdeep":"3072:NbIOHcmiNEnjlOqcAVwF1yFktsnq/HniEj2foXt1q5VABND2cp0cQnU:xIOYqjlOqca2yMQqfzUVAnZQU","tlshash":"80f3122ea2f21941d64296b765617d630daee8072f41e12b68d03996c3323fc5f722d7","first_seen":"2024-08-29T18:12:05.897064Z","last_seen":"2026-09-29T05:15:58.750824Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1623,"timings":{"blocked":-1,"dns":0,"connect":268,"send":0,"wait":270,"receive":546,"ssl":540},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.phoenixdexjt.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.527Z","timestamp":1790657513527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://phoenixdexjt.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://phoenixdexjt.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ism3Htbv9DtW29e0e8832jpt0Xe73Gx0QO5p2IadBb%2BUS8KNOgspZtrh2Sc9SX1%2F0BNjRkfywovt2X%2B8NehlZNsOren5xpiNk2Ir0vfxiPCaA3yM3QhDT9HHhML1UC7cpr%2BA9hI1TO1KLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a42860138ce6b517-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":956,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.phoenixdexjt.com/api/common/getAllSetting","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.629Z","timestamp":1790657513629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://phoenixdexjt.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://phoenixdexjt.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRMT5OzjT5keCq19dLV18xZn4KkgFH8dQU0R0xura68Uk4KMeqBcx31o%2BcOZuKbzVmcBvPMjhdTAQQU98xBEhrvFqsvptMn%2BVgOOy5JE1D%2BX7tRs4NWZp7CRB8XQRN3rLjtuXiXAbf9fxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a42860143cebb517-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":954,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp21e6f33fbcbb4cb2bbddf7b69de4f39d.jpg","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.701Z","timestamp":1790657513701,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp21e6f33fbcbb4cb2bbddf7b69de4f39d.jpg HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 103097\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EBB1E8233231AA9514\r\nAccept-Ranges: bytes\r\nETag: \"8627609C3E4A558603BCFE4E2DD60CFB\"\r\nLast-Modified: Wed, 15 Jul 2026 11:37:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15429893804965330771\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hidgnD5KVYYDvP5OLdYM+w==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":103097,"size_decoded":103674,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1254x1254, components 3","md5":"8627609c3e4a558603bcfe4e2dd60cfb","sha1":"34c69a1b34a6f5abb9f536b67e5751aa8c8b6574","sha256":"0742309f3eb937ef9604e07b5b20df512ab5ff5fbb89b223ac2d8a44a281b03c","sha512":"d501b43b8f566b1c7700340de875abe57af9d9c76e32f4b0e0e8cecfb34cd6704355391be84dd02ad4069e574498ba6c8c6401c4dbcda2f6dec9708cfb6aaea2","ssdeep":"1536:Lr4zZB6MCypqUV42NkTE0TxSnrPa7qm4VEd7AwJqtEA2g70aOEIVF6HizKDyr2qj:LEzX1CEhHGTE0TaGOdVEdUC6lwtzop0","tlshash":"9fa30223e3560427e6642f3011e36b683e77ebb6576e220a876c543d1a9a3b13d72f11","first_seen":"2026-09-23T15:54:57.008477Z","last_seen":"2026-09-29T04:53:15.989252Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1724,"timings":{"blocked":1358,"dns":0,"connect":0,"send":0,"wait":293,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-88138ce3.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.019Z","timestamp":1790657512019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/index-88138ce3.js HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 508\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\netag: \"6aade89a-1fc\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":859,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (507)","md5":"9b7bddb5a28d4d4d0586cd9bea2227b9","sha1":"ea4722664e04eb3815ebffb7c5cceddd86f2bb19","sha256":"706634c3e33025bb550725f3d74a95f8d28d6ac9b9b5e35a27738b6e0e7d8752","sha512":"2f6094b54f37865f3b40476cdca9ad400ab37c5132796314afe74d342f9adfc7217a7254a2c17f6f113b4890bb926820c9bf8eed3c8bd47fa0dd6f46e698b703","ssdeep":"","tlshash":"6df0c96fb9aa84721bb388eca1230820a6081b166754c4a8d4870b10da34ce7d16e618","first_seen":"2026-09-23T15:54:57.002579Z","last_seen":"2026-09-29T04:53:15.987329Z","times_seen":9,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-fdaf15f1.css","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.032Z","timestamp":1790657512032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/index-fdaf15f1.css HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-2e36\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11830,"size_decoded":2598,"mime_type":"text/css","magic":"ASCII text, with very long lines (11829)","md5":"fb94e20138b9da5891b6e5d3038f1224","sha1":"ce20b70375281fa0311c138e351d69fbc4b46a17","sha256":"fdaf15f1e6413364352258450cb5b0be108039b63de5d4065664e3e066c91a82","sha512":"7b3a0683e5a54a3ff3cbdb67c7db7cde75555969df91346da5b8b4b71cbdbc5ed25760fec2d25cef12e36a6ce16fa0e0d844ee4d7516357bbb788cee82412d2b","ssdeep":"192:1bDifDqVkHbIbFTrN4oEYvXKTMuDvuL8pXm:1bOCKbyiwPkm","tlshash":"0432852cf799233c6c3bd1a67e8849cdd029fe61e6835d94f91792610dcf2e32a35198","first_seen":"2026-09-23T15:54:57.02967Z","last_seen":"2026-09-29T04:53:16.041378Z","times_seen":9,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.phoenixdexjt.com/api/common/getMt5Amount?coin=xaut","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.088Z","timestamp":1790657513088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xaut HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://phoenixdexjt.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://phoenixdexjt.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GqSixDg23yMYxhQWHT9SJFu3%2FwNSULWl3Z3YQ0m4h1Ip0caIQkgABJmW1bB7hS7Cbi1e%2F35%2Fd01ghFUwAAeyZH5QN45H%2B%2Fl233kpo07xGjO4BlH93gC409BLyJammY5p3JEUU5aHAJoaQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a4286010ccc9b517-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":948,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hashkxjts.com/xrp.jpg?2.0.1786012398636","fqdn":"hashkxjts.com","domain":"hashkxjts.com","tld":"com"},"ip":{"addr":"104.21.93.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.389Z","timestamp":1790657513389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hashkxjts.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 14:11:51 GMT","end":"Sun, 22 Nov 2026 14:11:50 GMT"},"fingerprint":{"sha1":"D3:74:71:DD:CB:DE:85:8B:5E:11:03:81:83:1E:06:9F:58:3B:8F:17","sha256":"BA:E8:63:61:8A:9D:16:B9:55:8B:8B:70:C7:C7:63:90:1C:24:88:40:0C:82:24:6D:B1:FE:DC:D4:68:9C:8E:A2"}}},"request":{"raw":"GET /xrp.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: hashkxjts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Apr 2026 14:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0c8e8-15bd\"\r\nexpires: Thu, 29 Oct 2026 04:47:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BarVtcNQU%2BYiJDjBdQJEFNQmZ4hs6%2FwUV9FyXkoBInEvTAY%2Fr%2BsP2m8HFsHgr%2Bqbkmc%2F3RkTblu3%2BKvILZPuCBuzLeugf8nCGLJQ7u2i9gsVItcmruhngXHLFdjDvx1R\"}]}\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4286012e8b656c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5565,"size_decoded":5682,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"07fed2e1aa3b93a393947e0d729f9ad3","sha1":"3ed49c3d9f95e23f83b151113406c528dde65198","sha256":"f97920e13f8ab448f03580ea9a2be8f72193340f46d2856e54a41d1bc365fc1e","sha512":"ab09141676ea42fb90d6cbfab99c6ebc4fbcfd0249cf49cec7358f5128c0fd90ad639ce582f6ac972d3a41e9f52e8387f68eeb5571624bb2965ffd090adde669","ssdeep":"96:1dgNMFPM14jKgBaHC05s5j9A422JytLd99q/O+UGmbH/A4ZQKC+UDkR:1dgNCG4mSaHn594jsByOJGSfQKC+Eo","tlshash":"89b15c31fb1862e2dc06073f554baf89274da902ba74e2a19966113bad093846a785cd","first_seen":"2025-06-19T02:24:45.752688Z","last_seen":"2026-09-29T05:15:58.72985Z","times_seen":14,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":3,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hashkxjts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.phoenixdexjt.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.570Z","timestamp":1790657513570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://phoenixdexjt.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://phoenixdexjt.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FpQAkyz23i2LxWAb4UkJD%2BpXFWCE2FN6h4vqtQ5Od%2FF4BoNoBiS2LSIkOiapdY%2BS9%2Bb9ZSG9J5Ob0%2B4D3BYg%2BwdpmIf9a9FGIOBf6IjAqv1Z7E%2BeEYBa%2Byk4pHiQh%2Fcjmrx51zs8vs8aBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a4286013dce8b517-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":968,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.phoenixdexjt.com/api/common/type/defi_activity_type","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.680Z","timestamp":1790657513680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://phoenixdexjt.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://phoenixdexjt.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A0mh%2B4xn9TCItlFS%2Fz7bSccMXp22tPASBY9JH1Y5vTjJVJ%2FDEW%2BsdB17eZM3pxyfGrSZehBZjWQGqdKu2PFE4xnakdWvmbZahY6VjzNCxc%2Bp665SwW8OvWoZ4eqM04z7mTWI0pROoRdqNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a42860148cf2b517-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":958,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/resource/fonts/Arial.ttf","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:51.413Z","timestamp":1790657511413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixdexjt.net/assets/index-05d2f786.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\netag: \"6aade89a-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047301,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-10-04T06:39:22.630841Z","times_seen":8336,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":150,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/platform/dev/favicon.ico?2.0.1786012398636","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.514Z","timestamp":1790657512514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1786012398636 HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\netag: \"6aade89a-10be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":4559,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-09-29T05:15:58.712245Z","times_seen":157,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_phb.webp?2.0.1786012398636","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.409Z","timestamp":1790657513409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_phb.webp?2.0.1786012398636 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10700\r\ncf-ray: a4286012fcc6b4f1-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 238\r\ncache-control: public,max-age=86400\r\netag: \"3f8a2d39781ba0ceb35f8158e38e8f24\"\r\nlast-modified: Tue, 03 Mar 2026 01:45:12 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=RT7ahqUFCn.O2v58QglaOlGK.i84Nw5NURhq4d35XSg-1790657513.4335716-1.0.1.1-JwOjBMwtVfiZcQ.BlLPlJTOtwHWHQeKIYJQCQ_obrB667hI4EQi0Xggocn6cv8tD6.5K.GQ5lHkOAe_WhW7H.U6_zRlH5j2iiwYg3ixZsfHrIORxkRuIhCM9ipHo3iN.; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"RT7ahqUFCn.O2v58QglaOlGK.i84Nw5NURhq4d35XSg-1790657513.4335716-1.0.1.1-JwOjBMwtVfiZcQ.BlLPlJTOtwHWHQeKIYJQCQ_obrB667hI4EQi0Xggocn6cv8tD6.5K.GQ5lHkOAe_WhW7H.U6_zRlH5j2iiwYg3ixZsfHrIORxkRuIhCM9ipHo3iN.","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:21:53Z","raw_expires":"Tue, 29 Sep 2026 05:21:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=RT7ahqUFCn.O2v58QglaOlGK.i84Nw5NURhq4d35XSg-1790657513.4335716-1.0.1.1-JwOjBMwtVfiZcQ.BlLPlJTOtwHWHQeKIYJQCQ_obrB667hI4EQi0Xggocn6cv8tD6.5K.GQ5lHkOAe_WhW7H.U6_zRlH5j2iiwYg3ixZsfHrIORxkRuIhCM9ipHo3iN.; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10700,"size_decoded":11583,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3f8a2d39781ba0ceb35f8158e38e8f24","sha1":"3abbe00f952c3547618186c24244652d4eaaedd8","sha256":"579729fead460dc03adc9ed58370eb1be5b2b6b151ef639bd61e45265e01f650","sha512":"b1c881d0a5aff5668b8c331aeaaea0fba8ed19fd1132c03e9ca9e40b835a89868013d21a6f585c21b740cdfc2747d0622190e08c533d825a919f35fd309e6ded","ssdeep":"192:C89NAY5SmzbZ0KPwMCK+Zv3SfSHjtqK0pVyVKqXNkOuGeCvcGjYft81R:X+mzRPlLq/8MjtWqVKq7lEBfa1R","tlshash":"c122b0248bc11c7b3bfde65a5541c05b60af82a9a114ce6612c9d077773ac4e0fdd4f0","first_seen":"2026-07-17T15:22:26.637891Z","last_seen":"2026-09-29T05:15:58.752629Z","times_seen":13,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":23,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-2abc8f12.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.015Z","timestamp":1790657512015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/index-2abc8f12.js HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 772\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\netag: \"6aade89a-304\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":772,"size_decoded":1123,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"2991d40b485f6c512c711b87f492ea79","sha1":"cecc3f4b9e1eb936c6243ef0ccafe2ec08fa5315","sha256":"91222758f331a32255b01a15eb65d7de0097a81f3048424fc7dd781ce3994ad9","sha512":"e34536356dcb40a8d6c339a8e33ff6b8e942953c53230cd10c20ba56f0434c33cbb8103f658de45d8b93f033b290895a1c520143bbb9d2ce36538e204e4f382e","ssdeep":"","tlshash":"1101fdf8fc0d8ebb1f6206800290250014091fddfa1405f198877e661be0940d7de72d","first_seen":"2026-09-04T15:56:41.497381Z","last_seen":"2026-09-29T04:53:16.038345Z","times_seen":11,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-d253bac1.css","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.020Z","timestamp":1790657512020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\netag: \"6aade89a-3d\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61,"size_decoded":396,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-10-04T06:39:22.648094Z","times_seen":511,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.phoenixdexjt.com/api/common/getCoinList","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.035Z","timestamp":1790657512035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://phoenixdexjt.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://phoenixdexjt.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eo3z12nS%2FVFRFkIDlBs%2BN81YLgHtph8EqJGH9lElasG99I7EdaVPaY8x59tpDQO1UPG4%2F4TrBXbYNZWwjvKgHtn9UFDhD4Oh8%2BXoT9ybbXHyYoIbUO8hkZvT%2Fnq2DV6SCeq%2BqM%2BXtBbHnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a428600a4c1db517-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":952,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":739,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp35c6b88242674795a227fc0ea3111981.jpg?2.0.1786012398636","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.356Z","timestamp":1790657513356,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp35c6b88242674795a227fc0ea3111981.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 04:51:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1562\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB43EA6AFD363833830A9A\r\nAccept-Ranges: bytes\r\nETag: \"569A0DBD2FFA9B38F25CCBC8E6697778\"\r\nLast-Modified: Tue, 08 Apr 2025 17:35:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2778767496489567871\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: VpoNvS/6mzjyXMvI5ml3eA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1562,"size_decoded":2136,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 64x64, components 3","md5":"569a0dbd2ffa9b38f25ccbc8e6697778","sha1":"2b30ef6f52c6deb1da0ebdbb8bb0b068ace65d1a","sha256":"568a577fe1290cc61e1f99c712ae3ebbd973763c88961ebcadb4b41b1ead509a","sha512":"5ddcab2093fef6504c0777315e6f5a91fd5abbfe4de70773d355510fdaebb44a491e75cf576dd163742b516fd44392c0b2c60928406b782ea863ffc9f55133f0","ssdeep":"","tlshash":"9a314c439522b57dcd1304b5a8fe2a72cb037c0237f92c4f56c3a318d24b301284408c","first_seen":"2024-08-29T18:12:05.875464Z","last_seen":"2026-09-29T05:15:58.763031Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1149,"timings":{"blocked":-1,"dns":20,"connect":281,"send":0,"wait":282,"receive":0,"ssl":566},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/vendor-4403ead3.css","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:50.613Z","timestamp":1790657510613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/vendor-4403ead3.css HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-16c33\"\r\nexpires: Tue, 29 Sep 2026 16:51:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93235,"size_decoded":38099,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"3f2c7c11bc75e1c780824010f462b032","sha1":"0acc763f04d5838b2b029b341b5104a89ee0c585","sha256":"4403ead3789b29ab48a876aeffabd2dbbae4822829cedabe40430d5365d0f6fb","sha512":"63db33655374dbf69aa50bd7f88200ff2ffb5f4272eca9ccd54787d715f7bedb42158711908985c0ee887bcfc3d6dc1d1556be767966f4665b38012d989413aa","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Lb:BnNIClDsIxuVS83b","tlshash":"1a93d4a5a5c461fc6f2ae2659b8766e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2026-04-27T17:20:10.611354Z","last_seen":"2026-09-29T04:53:16.012613Z","times_seen":27,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/assets/index-6d6495cc.js","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.013Z","timestamp":1790657512013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /assets/index-6d6495cc.js HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aade89a-11ce\"\r\nexpires: Tue, 29 Sep 2026 16:51:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4558,"size_decoded":2345,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4555)","md5":"898552c56ca44107151554a4242aebf8","sha1":"f28569a97cb5b2464fa95a9e5fde725ba1a89a20","sha256":"d966c6dc0142e00ef83c2e5d7a8acd9efea54c8138baf38c64d9e9b4a1dee576","sha512":"398e135f99243df4f992e02d62b1f5369933c5874daa6da3b410093e15a60671d65c4f2de9cadf9e86838caaf3f23046df0091358aeefdbdef5815e9c20879db","ssdeep":"96:5MQ57gPzRpnYfN13IqZqD+wnv6H1ctbCys1xHO0LDt4IGeby3huOc3TNCFJtIFPe:XiPzRhY1hIgqiwSctbo1lZxCh8TNzFEP","tlshash":"da91b78cf80389ba9a77589844550420328c3bfeb1254cf6f2fe8d4d67b5dbad794721","first_seen":"2026-09-23T15:54:57.026475Z","last_seen":"2026-09-29T04:53:16.022494Z","times_seen":9,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.phoenixdexjt.com/api/common/getAllSetting","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:52.034Z","timestamp":1790657512034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://phoenixdexjt.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:52 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://phoenixdexjt.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zn0h4mZHkxeCXVQAUM5sVkgx%2FOYcVSv9NIk5nTUAFS2v%2FxtmaXLOB8inT9jtZ6Oh9eVtcXTPbcgvVjYSmSfVmtebkBYaHguoDkhGXCtCyBn7GOeESh6RgdCiOt55EGU%2Be%2F8scIFFpE0kqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a428600a4c1cb517-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":946,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":764,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hashkxjts.com/bnb.jpg?2.0.1786012398636","fqdn":"hashkxjts.com","domain":"hashkxjts.com","tld":"com"},"ip":{"addr":"104.21.93.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.400Z","timestamp":1790657513400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hashkxjts.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 14:11:51 GMT","end":"Sun, 22 Nov 2026 14:11:50 GMT"},"fingerprint":{"sha1":"D3:74:71:DD:CB:DE:85:8B:5E:11:03:81:83:1E:06:9F:58:3B:8F:17","sha256":"BA:E8:63:61:8A:9D:16:B9:55:8B:8B:70:C7:C7:63:90:1C:24:88:40:0C:82:24:6D:B1:FE:DC:D4:68:9C:8E:A2"}}},"request":{"raw":"GET /bnb.jpg?2.0.1786012398636 HTTP/1.1\r\nHost: hashkxjts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Apr 2026 14:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0c8e8-523b\"\r\nexpires: Thu, 29 Oct 2026 04:47:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sc4BXFU7jnRRr06qFqxAgv4FTboLqDtkDpVOva5pba%2FzKli4N7KM3A5AB4Cnofq%2FQZKMaUVx2ZiogsLrJLFFjcy7P2obPg4dulF%2BEGNkFJr7Ls9M5V6w6YCNL4eiGD2v\"}]}\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4286012e8b956c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21051,"size_decoded":21566,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"d364a4660a2864ab0d03fb9fd9bf8e6a","sha1":"869d24d2055a64546a9df9b4e1ba913e339ed34f","sha256":"49633b06336e809ce467cd9b6f546998acf30e6ed04c3435bf8b75a68c5cc9ef","sha512":"e1a25c1f637215629783030babb5afb1e723a574793b97d4495b61c0e3295901351d26bb9c434491f3809dbf6f29083a239112970ec4ffbfd625e20de6ec72de","ssdeep":"384:qxS1qaGdxfOpEQAWel++bWipVh0UAdHF0Rj40xQQpuKcd9hnv:tAakcEQOQaWipVKdHF0SiQ3hnv","tlshash":"c892e1371231c679c7ef35bdb7370ceade068950f1bdc26aa11125c015aa265f88e8a7","first_seen":"2025-06-19T02:24:45.893066Z","last_seen":"2026-09-29T05:15:58.741802Z","times_seen":13,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hashkxjts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixdexjt.net/resource/fonts/DINOT-Medium.otf","fqdn":"phoenixdexjt.net","domain":"phoenixdexjt.net","tld":"net"},"ip":{"addr":"206.119.72.93","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.448Z","timestamp":1790657513448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 00:43:51 GMT","end":"Fri, 18 Dec 2026 00:43:50 GMT"},"fingerprint":{"sha1":"A5:6E:F3:65:C4:B6:A7:E1:7D:16:D8:F5:80:30:D3:C0:EE:7E:FD:63","sha256":"18:A3:31:C3:C3:85:0B:6A:05:62:46:4A:CA:CC:3D:AA:91:F9:88:D4:C1:74:D7:E9:3D:17:B3:55:BC:CF:16:BF"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: phoenixdexjt.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixdexjt.net/assets/index-05d2f786.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Sat, 19 Sep 2026 01:42:50 GMT\r\netag: \"6aade89a-11d88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":73383,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-10-04T06:39:22.649819Z","times_seen":7685,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"phoenixdexjt.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.phoenixdexjt.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.450Z","timestamp":1790657513450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://phoenixdexjt.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:54 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://phoenixdexjt.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upppD9s8jJzdugkwDu354kxd5XPy1y1M0QDTBHrtD6ZtLTkaLXSUkLNtUTNyokUckdwlU8unQnM5a%2Bd8sJ2InEkKRxwBCC84DznwkjkSgrmXAl8%2BP2K%2Fh%2FdlluL1f%2FmTbpNn9168%2BBolDA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42860152cf5b517-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549,"size_decoded":1296,"mime_type":"application/json","magic":"JSON text data","md5":"ffa6afa62c27b090e7242b8fd30e389d","sha1":"85bebdc31e77c4fda9f747a59211510052fdcc68","sha256":"3cf4300fe31f2d1f8ebc71b245227369ce796ba4a5f80e8714e5bc2ab3d60b33","sha512":"484764c29c79c3370389f947d7feaaf0198eb9e11042e58228621a79dfcdb3c579ebe43d24e226aeec70945484b94606617c9510051a7675e0d0803dd5fe03d9","ssdeep":"","tlshash":"e1f0c01f5678deb50c0508cb94cdbcca924e1b47d770cc305996cf9c81f49b71b06508","first_seen":"2026-09-23T16:09:53.181579Z","last_seen":"2026-09-29T04:52:47.897475Z","times_seen":5,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.phoenixdexjt.com/api/common/getMt5Amount?coin=xap","fqdn":"webapi.phoenixdexjt.com","domain":"phoenixdexjt.com","tld":"com"},"ip":{"addr":"172.67.201.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.089Z","timestamp":1790657513089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixdexjt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 09:02:37 GMT","end":"Thu, 10 Dec 2026 09:58:36 GMT"},"fingerprint":{"sha1":"A8:03:7E:DE:AE:95:50:C7:B9:5B:DD:55:7C:BB:7A:0D:5D:FD:D6:48","sha256":"1F:7D:80:6D:A1:1A:E8:D1:5F:9C:B3:3E:EF:47:92:6A:1E:4A:0B:43:BB:88:6A:46:5E:28:66:C4:DD:D4:A9:E2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xap HTTP/1.1\r\nHost: webapi.phoenixdexjt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://phoenixdexjt.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://phoenixdexjt.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=irUYItTuTSth6PtXJxMugVZoki65xSL4QzsGYpnu7Vm7QS%2FyB1Pc5tGycSVTgMkpqnZrxESLVsSfUUtgSO0k9onj4RPH0evrIQPO95b%2BoBul5iZfQcUesrKnl63ViKfTEGKHQAxssIIyNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a4286010dccab517-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":942,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.phoenixdexjt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_fil.webp?i=kds?2.0.1786012398636","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixdexjt.net/","date":"2026-09-29T04:51:53.418Z","timestamp":1790657513418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_fil.webp?i=kds?2.0.1786012398636 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 04:51:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10376\r\ncf-ray: a4286012fccab4f1-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 238\r\ncache-control: public,max-age=86400\r\netag: \"7d825dc4491dd0a4b97bd92e0ce30fc6\"\r\nlast-modified: Tue, 03 Mar 2026 01:43:24 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=6VZRBtw6SlBIAfsHIL4TeQJVsblpZnKOvfCD.w9nlTI-1790657513.4348855-1.0.1.1-OqWoFImblFXi.cx_gZwALezN6As7.pcuuFglTQVuAJK7Ah50UvJ1a53nkHQLNg3tLc_V71yyYUsKHVexuYxZ.FxGOtiJ3goC4RPGFcAHCqL3auXM5oC1HN8EijPA33_D; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"6VZRBtw6SlBIAfsHIL4TeQJVsblpZnKOvfCD.w9nlTI-1790657513.4348855-1.0.1.1-OqWoFImblFXi.cx_gZwALezN6As7.pcuuFglTQVuAJK7Ah50UvJ1a53nkHQLNg3tLc_V71yyYUsKHVexuYxZ.FxGOtiJ3goC4RPGFcAHCqL3auXM5oC1HN8EijPA33_D","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:21:53Z","raw_expires":"Tue, 29 Sep 2026 05:21:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=6VZRBtw6SlBIAfsHIL4TeQJVsblpZnKOvfCD.w9nlTI-1790657513.4348855-1.0.1.1-OqWoFImblFXi.cx_gZwALezN6As7.pcuuFglTQVuAJK7Ah50UvJ1a53nkHQLNg3tLc_V71yyYUsKHVexuYxZ.FxGOtiJ3goC4RPGFcAHCqL3auXM5oC1HN8EijPA33_D; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:21:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10376,"size_decoded":11259,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d825dc4491dd0a4b97bd92e0ce30fc6","sha1":"56cf5516c736b46055921198c5a838104ee724e4","sha256":"12d4d97086193b009ecf778fa83a11b88f358add84d89a06560d3cf2ba916d4c","sha512":"d5bd6497932b56573c54e6dcdb54cebc0997cbfd94f17650ff32a64bd7742b42ef897b0e6d67ec885dbf7e5bcd1ec3c9b73c2efc7c472f65c77478835909b767","ssdeep":"192:D89NAY5SmzbZ0KPwq4xcqOPBMlpnY5+FPmJePHZmy1tn8NPIo08ffADl:4+mzRP8t6BMlFWsPmJefZP1taIo0ufAB","tlshash":"b922c08e8390bb711ecc06137d52983118a642041754e81fb6eeca87f765d1e2dd6bbd","first_seen":"2025-06-04T17:05:58.568316Z","last_seen":"2026-09-29T05:15:58.712902Z","times_seen":37,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}