{"report_id":"1e4ea75d-4880-42f1-a90d-b5863f143219","version":6,"status":"done","tags":[],"date":"2026-04-18T12:46:09Z","url":{"schema":"http","addr":"dogecoinkan.com","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"104.21.24.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dogecoinkan.com/index.html","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"title":"Dogecoin狗狗币交易平台 - 狗狗币价格行情,实时走势图","dom":{"size":113648,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (44228)","md5":"0a70d8da25dab1e22dff77b7c1f6c54d","sha1":"814a221761a04281bed81606655eb771c985413c","sha256":"66ce3df27783156f8a8fd262038faf25cc61330ccfdaa8b17eb63d680842a5d8","sha512":"8704614138ac074bedfa4e29462e38d36c034a2858f2f539111ddd097b51a1cad27c3244549c987cdd0cdf35668b9eb67907bff34c18176c249ebb85bd6ce5d8","ssdeep":"1536:VS+xZPni4kYoncgaWT8WmIRG3GuygZabxpTa3gcBDdZguX+a5HHGwiFiBmKWrz:5ihc8Tn82ZbDa3tsuX+a5HHG7VKWH","tlshash":"7eb3aff62e826c16aee7819a5183328edd37d55bde0b888472f7f20446ddeb0ed43845","dom_hash":"domhash44d3061fa36c8da804f9d8645ab3bcd4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dogecoinkan.com","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"104.21.24.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T12:46:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-18T12:45:49Z","timestamp":1776516349,"ip_dst":{"addr":"104.21.33.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-04-18T12:45:49.245281+0000\",\"flow_id\":431298417894137,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":35014,\"dest_ip\":\"104.21.33.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"bethash.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":913,\"bytes_toclient\":2683,\"start\":\"2026-04-18T12:45:49.238329+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"dogecoinkan.com","ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-05","domain_rank":0,"first_seen":"2026-04-18T12:46:15.270378Z","last_seen":"2026-04-18T12:46:15.270378Z","alert_count":21,"request_count":21,"received_data":845452,"sent_data":11582,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"global.turing.captcha.gtimg.com","ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2008-10-09","domain_rank":579962,"first_seen":"2024-01-22T04:09:05Z","last_seen":"2026-04-17T00:42:14.384204Z","alert_count":0,"request_count":3,"received_data":864163,"sent_data":1327,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ca.turing.captcha.qcloud.com","ip":{"addr":"43.158.119.130","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Germany","country_code":"DE"},"domain_registered":"2003-07-24","domain_rank":777871,"first_seen":"2024-01-22T04:09:03Z","last_seen":"2026-04-17T00:42:14.633954Z","alert_count":0,"request_count":4,"received_data":907939,"sent_data":2925,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"77hash.s3.ap-northeast-3.amazonaws.com","ip":{"addr":"3.5.241.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-05-28T04:50:51.18741Z","last_seen":"2026-04-17T00:42:14.306062Z","alert_count":0,"request_count":1,"received_data":1623,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-04-13T04:36:40.415277Z","alert_count":0,"request_count":1,"received_data":175,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"api.bethash.bet","ip":{"addr":"52.84.50.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-12-01","domain_rank":0,"first_seen":"2025-11-03T09:27:08.288441Z","last_seen":"2026-04-17T00:42:15.403081Z","alert_count":12,"request_count":6,"received_data":92499,"sent_data":3116,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-12T22:24:43.06808Z","alert_count":0,"request_count":1,"received_data":473876,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bethash.icu","ip":{"addr":"104.21.33.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-07","domain_rank":0,"first_seen":"2025-05-28T04:50:51.177254Z","last_seen":"2025-10-04T13:15:53.533241Z","alert_count":0,"request_count":1,"received_data":1162,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bethash.bet","ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-12-01","domain_rank":0,"first_seen":"2025-05-28T04:50:51.182422Z","last_seen":"2026-04-17T00:42:15.370514Z","alert_count":22,"request_count":11,"received_data":3130905,"sent_data":4946,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.turingfraud.net","ip":{"addr":"162.62.10.47","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Russia","country_code":"RU"},"domain_registered":"2021-11-26","domain_rank":123997,"first_seen":"2025-09-02T10:13:24.398569Z","last_seen":"2026-04-17T00:42:15.556884Z","alert_count":0,"request_count":6,"received_data":2358,"sent_data":3070,"comment":"","tags":null,"fingerprints":null},{"fqdn":"collect-v6.51.la","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-04-13T05:16:52.426887Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":463,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ca.turing.captcha.qcloud.com/TJNCaptcha-global.js","fqdn":"ca.turing.captcha.qcloud.com","domain":"qcloud.com","tld":"com"},"ip":{"addr":"43.158.119.130","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f54a9725d467aa5b83da934abe6898c","sha1":"7a22abada5e5bbb0a73ee548ccf8cf0544bafa14","sha256":"71e6fd2d67cddb60983bca18452d0cc29513ebb31c7e6bdb9cdf48073b8d627e","sha512":"04dcefb913958bc4e2f134695e1c0ed43c5aba28c1e6c223fc6df9727a5edbf03a8e9bbe5fbae25881044b531209027e4f40b77b27c600a3e7c01891d27a8b53","ssdeep":"12288:wKkkZEAi1UFtNgKsuPEX77Ng6RXvWbiqQFb6tDITMzvs60jr0lUirMcDkwqBwmho:xPEoFtNgVuPEr5qR0fwMHvpkv9ossWCq","tlshash":"2c15b84077c07849539b8f3bb32bb5f6f81a0c6a3d98448bd600fc5466e6627fae5931","size":903500,"data":"","first_seen":"2026-04-01T08:03:24.05058Z","last_seen":"2026-04-18T16:43:33.867561Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ca.turing.captcha.qcloud.com/cap_union_prehandle?aid=189999718\u0026protocol=https\u0026accver=1\u0026showtype=embed\u0026ua=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjA%3D\u0026noheader=1\u0026fb=0\u0026deviceToken=v3%3AAqCgYrCgoGKwlVbbpVvvCR4BrQ9UBlMVuZbvJj8ZhZGSdmOBik2%2FRUjgTZkFJwOTJCZ2T52NTHX5cUmOy0R6seC49GaZ3h5LyjPbUEVoXCYeHfQ7BtZ%2FHVESsUL7ebQqGXYAyIdLq1iSpJZanmuFqqM03xI6Arzh9s5WtKDhGoXCOH11%2F%2BhhT2k3dgcThDZPfwmjZ8SFhhCIOoiURh6HJBO%2BDc2QCL4zxzgqyUnwIHJouBFy0ZTtQIYkDcZPClHm3cquFJSoewUKiL9l52tX%2BN9ihrJtrnBD3GuKMHBfgp1s55IaJJKrIc064mxnT1%2BBNKRq2n1KCkpkCZk9%2BxfMf7zfDmM3FIN7xFhVfS%2FeRcVWIGPriMaFfn3K4OJe%2FXwMCF54YKV6k88L2wthpGKwqug9oWBakqCjioZUhRqVqoCXMR7Y8FbizoR7JYj1L750oLzHL6ue6iF9HlC7e%2B2alSrxCvQRqlWsocd1A%2BSSpstz\u0026isJsVersion=3\u0026aged=0\u0026enableAged=0\u0026enableDarkMode=0\u0026grayscale=1\u0026clientype=2\u0026cap_cd=\u0026uid=\u0026lang=en\u0026entry_url=https%3A%2F%2Fbethash.bet%2Fregister\u0026elder_captcha=0\u0026js=https%3A%2F%2Fglobal.turing.captcha.gtimg.com%2FtgJNCap-global.c89bafa8.js\u0026login_appid=\u0026wb=1\u0026subsid=1\u0026callback=_aq_650475\u0026sess=","fqdn":"ca.turing.captcha.qcloud.com","domain":"qcloud.com","tld":"com"},"ip":{"addr":"43.158.119.130","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"71452d667a58c990ccc48a030aa67bcb","sha1":"89d6da41f609324c0551c693bcc1ec12e8ff670b","sha256":"3e84463e0318f08e67e1ffb950268c6dd6211f89c0a699783b5d4cb22d878d35","sha512":"0bb18fdccda76a56dd5e865d63408f10baaecbe064d678847742ef1f23ea7aabb612a2c4b5e711f025e617df90881588f8dfd70fac6253db19ce680284adbba4","ssdeep":"","tlshash":"9e51c739963d4a6ba9f07db87431e11c5496301186c809a2dfedca216398db8a31a60d","size":2734,"data":"","first_seen":"2026-04-18T12:46:26.956119Z","last_seen":"2026-04-18T12:46:26.956119Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/index.html","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9248ecb73a054e84efe6e01521fe751","sha1":"0ad626b9597453ba6bc6d580dc7b7571b007f270","sha256":"36628222cb04fc0c3dde445bdebb0e4f485a414895748d0b623eaef96583c862","sha512":"6ebd2678dada60a9a4d46ea5c263353d6b25e5c84ca36ca1dcb5f4e1447e9381e217b43facef8edf6b5a67dbd1e0b5c9224bef7a74585b3691fa3b4cfb9c1773","ssdeep":"","tlshash":"bcf02bbdf25a634633a2248f15012d4455b7d3975ea60d4db1590a8c10382e242bffb9","size":543,"data":"","first_seen":"2026-04-18T12:46:26.980502Z","last_seen":"2026-04-18T12:51:41.323816Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/js/jquery1.9.1.js","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6131fa1b49aa9af97cd8dbc5e6c1abf","sha1":"337e52292defcb737a997ffe12709baf3f3e52bf","sha256":"28461bdb3d26e84e6ac6748d6192516ea0e058f1475ed0195ddb8e98f4d01b1c","sha512":"fd272ae8022558d7515347f51b6a11d1accfcfcb34a9fbf6f60993f1a0a52495c791f53cce59aa6206f59aad37e9e90f36c52500380e923121c7e50b9b665cd3","ssdeep":"1536:9RGu+0mf0GlH5+gdK0VorwDAd7c0Fz51bdEZpW+03c:9UffR+KK0VorUAdo+16T","tlshash":"a2633af550d4803323e0e3da135285d2f7a384be3e17dc5af268ff5853a0e1aa197a56","size":69934,"data":"","first_seen":"2023-03-11T10:52:10Z","last_seen":"2026-04-18T12:51:41.279847Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/assets/main.ecaab409.js","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f56a6beea8bddaf29b9de2edf07661b","sha1":"9bbb1246c58a38265b5f11bfdc22a5c6b5f17116","sha256":"2289afee27d3691de91ee42e4ca50a799383894c12edfa99d6df77adadfdab44","sha512":"3e29cc24b98e784fa43e4e399a5d48105148c75e5ce5d6381ebb6191ebbd1a1c19f1c59b4646eeecd3c25cdef15b6a84841a48ad1549ece8a7490c24b84bcf2c","ssdeep":"49152:dV6cDTV090IdumcYuCoj437GpzyQwWGUyv+A:54GSp","tlshash":"687586acb1cb999103d589845c6632e1b11c1e4a3588f6e7e8b89d7afdc11b1c673f38","size":1622337,"data":"","first_seen":"2026-04-17T00:42:36.103161Z","last_seen":"2026-04-18T12:51:41.322385Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/register","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e5eb8703c542a15b6640cc66ffdbdf3","sha1":"586bac1512796bf6908bd1a009c4428507779d5f","sha256":"242a44bbd02b7d5650adc74d446f44b7b42745e30ef1249ee46347290957867b","sha512":"080bf55f38be4827ee6807af62b6e37d8cb08147c718aad9bf103fc303bca1a41df7107e67c1836f98e6c49623a1979efc9422910129075f7eeddc4e3e398952","ssdeep":"","tlshash":"38c08c88211b0cb092e62b414bbfe204b08a3212949069213d0f73088f20e07e744824","size":192,"data":"","first_seen":"2025-11-03T09:27:19.940714Z","last_seen":"2026-04-18T12:51:41.323182Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"global.turing.captcha.gtimg.com/tgJNCap-global.c89bafa8.js","fqdn":"global.turing.captcha.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"434fc1a424b9e1c7fe931f240c16c080","sha1":"4bfb6cde69dabc4bf8de129f2541c95b5daf80fc","sha256":"d0b7ae0a0a87c008aa6ba0575518785fa53d24bac0661a7ae52287813877d2fa","sha512":"a5b4716d0b0bed50cb3c431e6f9f4eca5471a59e67ef8e92f9dace5cc38aec8d91baf636eba5ecdabcdc4d886756ab98b0c491d0f797245946ccbc94bcb6afde","ssdeep":"12288:skViGKDQc49wxGl1OmDttStYc3sT2xsU2qCgSMFC1wi5Kw9w5Am8FKk8JWDWiRIF:aRDQcjGlYmrTDWiRIB/","tlshash":"f9e41a407ad0a85d035b4f7b732bb1e6f85e0d6eb888488ff145bc9095e952bf9e0670","size":711313,"data":"","first_seen":"2026-04-01T08:03:24.041324Z","last_seen":"2026-04-18T16:43:33.855724Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/index.html","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce5804de47790681d089929bc677cfae","sha1":"1c1a93deb5562c2dcb6784ec075745ba45d6c9f8","sha256":"21bff6690e6ea6317c8f36d62c13ffcaa2350dbcc4b12642bccbeddeaacfa478","sha512":"c1bfd68c625ab67354e5baff03f740b3dd5d50f0e421df6d0e558b5cb6b47d22543063d8057c8dccc3cb38ec57febce1599776b41fabf0aa3ecaa9714ab7fdc0","ssdeep":"","tlshash":"28e0c00d25f7d64f68860802753b70166b8026e410c048acd4ebec1d32c0ddf12bd420","size":344,"data":"","first_seen":"2025-08-14T04:55:24.373979Z","last_seen":"2026-04-18T12:51:41.325582Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/index.html","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b16b24adc95fa529b3a4ece55844d28b","sha1":"c91076ffbbde497c513a23f16ee75722cbd457ac","sha256":"b95d19e8926c2bfd132ac53579f5ea60106745875e169b1249bd2547e91a150d","sha512":"5c036c3a384667cd3f79520911be93114736f90b7fe87bd24db5a3a7544614fdb385e91e08a9cef6d7cd4c474a226edfb9ddfe9b84308247d8c6edc96ed2e730","ssdeep":"","tlshash":"22b092e4f34c342a803b1082486e95d9eeac0430a80c0827fce823706ca272516038cc","size":127,"data":"","first_seen":"2025-08-14T04:55:24.375433Z","last_seen":"2026-04-18T12:51:41.326222Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/js/jquery.flexslider-min.js","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b22ba873303e38db52d334001c9c35f","sha1":"659986c36a7f19a2662ed3c5a000e1de11e36923","sha256":"0e5d72c20e148edca04967ab4bff432f44264779dc5ecd81bd710eb487fdd145","sha512":"689a77a8e0165a1c08b71697ee5392e1a1fb796a55076de052ab8c052df9faf48b6c57ecc4035e5da71bc3985ad8fb1344954a5c8d1957375d76d236e508288b","ssdeep":"384:6mE4TjopcnfxNiYK0E8g8MXromIsnBscyVTnmhrpb0SXEk98Ve6:Rr86npNx3sro5sjG+tbjUJVh","tlshash":"2da28324f2503972cfe722ae7e0fd40669b3d441e816c83d3a3d574a2d641859b33eea","size":21414,"data":"","first_seen":"2023-03-07T13:50:43Z","last_seen":"2026-04-18T12:51:41.28832Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-04-18T18:25:21.880669Z","times_seen":85666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/assets/login.4af18a7f.js","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"326f993fcf46a737902c9eba084f110c","sha1":"44a183bb22cbd17afaf2cc11a95098ca3d18008b","sha256":"b4b44bcf0e547c0f150691b55fab3d06c3787ee99b4c47780d5efad16a875dc4","sha512":"5fab21f48b7e34cf779de3d2c1c86268c9dbf551e12f2bc018238e072063f110b6de9da931569f04aea69b2cbc92d0e985d0a5b860971cd73a5869e5d8e29f92","ssdeep":"","tlshash":"8361be9af81e8a3ac9765544c4b6240c390d2ff46250af7f5cf88e253fd5e6d270e2a0","size":3299,"data":"","first_seen":"2026-04-17T00:42:36.056852Z","last_seen":"2026-04-18T12:51:41.287836Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/js/main.js","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09616c12f6e4b9318049182006b37916","sha1":"9039a533295fd27d257c80a3fd0bc768dc4fdb1c","sha256":"c30dc6760d91fe68da63d49cb63cf73880f9cd8ce7cd053403217d5eddb2c13b","sha512":"793a723b49109744c3ab4ea8554d051b708e67bfaacf3c7853c5be6cb8592adaa31f21016feb17ae14c2fc6116e37abd6783f75bc6e23f5f1064038b369676aa","ssdeep":"96:EoHXuLyRoTrTY17eSLhvoz0gcmd/IlSoEm:Eo2yRR1HLhvoz0gcmd/SBr","tlshash":"a7a12045f129057891b63335cb3f5c19ac73484f99691864f6bc14ac2ff9b88a36fe18","size":4780,"data":"","first_seen":"2025-10-11T00:17:30.427497Z","last_seen":"2026-04-18T12:51:41.306518Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bethash.icu/","fqdn":"bethash.icu","domain":"bethash.icu","tld":"icu"},"ip":{"addr":"104.21.33.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f9d62cd1b06b88e02e52ccaf1813661","sha1":"abe7e5121830ce212ad7d34f87bb082a4edbed40","sha256":"17b9ca98aa6ac9daebb2c4556914e62caab61737f1a2eabbc94068b64fa83758","sha512":"06768a62eb11ecfa8f06feae1521ed887dcc51aaa55867db0a38b14190e4b6e7b8bce0f8a6122b3a100b332442f2079c02a459390b5689497e4fa1b548e853c5","ssdeep":"","tlshash":"4990028016c20403cc248422811007733371004088146027c6c640cb804cc32629531a","size":54,"data":"","first_seen":"2025-05-28T04:51:10.489096Z","last_seen":"2026-04-18T12:51:41.324876Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EV1YS9GR4D","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3addcf2b8c9f8d968a8f6abfac7b7492","sha1":"0b53f8f2448ed7db92671e41d7deb55118712467","sha256":"04430404ec305b6905e033812c96f5303bde8956b41751f7a6008d7d5f2839d0","sha512":"15faf942dc9fcca14e26c6195dfa68ee1e57d0eb28bf7889c6d7cc1912eca895e2a9b8861f7a05da0a4aa44beb986aeea9e294b5f833abfdf02d35c699810aac","ssdeep":"6144:jF4OjKg7CA4MRBRfrJPj8B3v0yIjwcHCpLUgW6w01V91XG:x7t4MtfrJL8p5WOW","tlshash":"67a409ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","size":473272,"data":"","first_seen":"2026-04-18T12:45:36.447503Z","last_seen":"2026-04-18T12:51:41.321297Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"global.turing.captcha.gtimg.com/dy-jy3.js","fqdn":"global.turing.captcha.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"626436a6c87a002eb7e8a99c6f5f96b6","sha1":"67d9732c33dc7689a98e63af2a97b0912f290762","sha256":"2a5fc3ad9f9e68e6de662de3e43661e1e8e447df0929efc64c0f067be2d9c455","sha512":"36dac1d5ea743f78e2fa1a503ce5d4448497717589529d1946edde1e474968d116bb21cea723ce8cf3cbb7d6b195d347588a0aa00473b5f41808dda1ee50369c","ssdeep":"1536:BjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:BYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"7c93f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8eabc78a4e827bf7d","size":89391,"data":"","first_seen":"2023-03-09T21:24:24Z","last_seen":"2026-04-18T16:43:33.874379Z","times_seen":1112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/index.html","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"71ee47be4865157c8486d0623d2028e7","sha1":"fabbf560bf90d47c77cf84195be37d85b7be14c9","sha256":"5a7a572e4f2552e4b3ffd0df68a569010b1dc263f1a938de1f7de17c2764e276","sha512":"09864bfdbf5f3243491c9f8bcb6861a8643342fb6011006a87c28b01828e5482a640767c3f288091455a60f23f43e90edf23321a72497822553db518e8c7c3cb","ssdeep":"","tlshash":"e611d07b0a72901c9326e01f7039998d35b484267f21da56f0f8fd3aacd4f15446fa9c","size":921,"data":"","first_seen":"2025-05-28T04:51:10.497562Z","last_seen":"2026-04-18T12:51:41.326967Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/index.html","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4778224eb4e1e0daeac8fa6db197451a","sha1":"943d62e9ef0eb8eafdbaa6e8bd929ef41087b010","sha256":"ab0c9a7111c90a7779f7c69414eb713583889d032a1e1bddd6c6994e53d41b35","sha512":"e4b6bce7619836ed401d7a20cd3edd686ecfca49df1543db874a7dbf44f000467ab4b9a6ffd86dfac3edc634feacc68ec5d6aa2f7ff8b0ff9916903cefc41bc0","ssdeep":"","tlshash":"b0d02b0f2c16183c2366046c1176e98cb161544c507ed10040dde8424560ec3182df88","size":254,"data":"","first_seen":"2025-05-28T04:51:10.498896Z","last_seen":"2026-04-18T12:51:41.327901Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/index.html","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b59b3c9088bf50a20700182490998e10","sha1":"7e981134d0d6577dc2103481db6ae21c2433a16b","sha256":"798d4efc852a4a514506b2c28ea11952f5462490ecc2a02623003567f013d691","sha512":"8553cc6d8eaccdb8ac67ad247178dc1b9b6563f830a3f6c0a7f283ef95c6b4db1d21e0f79f64320b0864163c6bbb0d60b252330724f61510082627a239a3072f","ssdeep":"1536:Znu00HWWaRxkqJg09pYxoxDKcXJrg8hXXO4dK3kyfiLJBhdSZE+I+QI7rbaN1RUi:ZdkWgoBTcZRQImW42q5sE","tlshash":"00932add72d2b02257ab31bd107f540ff136195a280d8450f268e8f9bc78a4aa277f6d","size":94726,"data":"","first_seen":"2023-06-12T12:38:16Z","last_seen":"2026-04-18T12:51:41.328814Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bethash.icu/","fqdn":"bethash.icu","domain":"bethash.icu","tld":"icu"},"ip":{"addr":"104.21.33.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96f556c9f935ec91863f12ff30b5ad17","sha1":"cfd7877551ee73617f34357c7c36b9676db9e66c","sha256":"f29aefa3b7aab3e681faf32b56c9b150fce023d14377a140f54477abeed6c3e6","sha512":"f69f45703ee64edcc4c186621c9a9965ef6630bc67b4e5c8a3c969f1de5dd7778133f129896686683e751683bc45ec2b97b9c93332d722c9c691d0f9f30962a6","ssdeep":"","tlshash":"eaa002ef400141071ad516b7ad063504615700ee594c9502d6028a903215b6f95a76ab","size":60,"data":"","first_seen":"2025-07-08T02:43:56.14383Z","last_seen":"2026-04-18T12:51:41.330267Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/assets/pathseg.8e50599e.js","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4abc45fac2e718d0fbdde7b49d94eefe","sha1":"b1fe7c6ace1a17ba8f0f56c2c93e75f4e80c806b","sha256":"4a1921893f8fe2d43c35077b4613c738e348e866c6ce8b2ea5d238e9e5ef2ae7","sha512":"861a86d99e2c8f148b931e318defde6d6a647f7433b682b7cede601cdf7c4cd7b403fe4b543e23be16a694a63d177eb84cb093a7e29ea53afe24ee2c4e81e2a4","ssdeep":"768:GCOCz2cv5dYTaulgQwKKh9eE8/nyjyUCJ8:GCOCicv5dYTaulgQw3s8","tlshash":"1003f150b5557669029ed2c6113f3a0bb33b54ec8808e09cf35dd4cef868887d99abbd","size":39870,"data":"","first_seen":"2025-05-28T04:51:10.295799Z","last_seen":"2026-04-18T12:51:41.28252Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"74312d9fd3d0d77a65b4edf6f7a9d543","sha1":"f8f99b78a90612dba2ab0f2f96d35ef3c77cd3c6","sha256":"e3932ed210d0dfb6820eacc496a3e5a609b8f011515b9324fe93b5d956a11f08","sha512":"12b6bcebb7867a2385206e03146b39db530208a5265d2e19423d7072042b085c883f48ba1d0757d1c27e624ae66da318eef2727806baf1c8caaec3df92c16312","ssdeep":"","tlshash":"52c080a34153d81c5125c151f471705c155d4e7457674c835d536e3eccbca9484e94dc","size":169,"data":"","first_seen":"2023-03-07T12:43:11Z","last_seen":"2026-04-18T16:51:54.311693Z","times_seen":5116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bce62483fdf9fc18601f2db87639e7a2","sha1":"9308730e4e3cbf5408e506959214e912d5d74915","sha256":"07077b1322f5bda0df74fc8d1418594d7ce029f77f12128237f1b2ea3b346c32","sha512":"db8ad31a9b764e694cfb75c6996b31ba5ab586611110c83c8e9da805a9de898c4f8775378679f52f63d4ce2781fcf72308cdbf022e7e5e4c881b75881d2c377b","ssdeep":"","tlshash":"71d0c2a19d8a68288169f1e070300aad7a27438aab580a3460f33a61a24e29124668f9","size":274,"data":"","first_seen":"2025-05-28T04:51:10.505942Z","last_seen":"2026-04-18T12:51:41.331212Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"bethash.bet/register","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:50.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:22:2C:06:7C:F7:60:E2:00:D8:75:A5:16:3C:F0:6D:35:12:F6:A9","sha256":"A2:B0:3C:02:0F:09:7A:78:65:5D:9B:E6:20:FC:1A:99:B6:C6:33:AF:64:FF:07:B3:78:1D:B4:83:04:C8:B1:FF"}}},"request":{"raw":"GET /register HTTP/1.1\r\nHost: bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.icu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sat, 18 Apr 2026 12:45:50 GMT\r\ncontent-encoding: br\r\nlast-modified: Tue, 14 Apr 2026 14:06:41 GMT\r\netag: W/\"69de49f1-466\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 3uwv1tgGryNL5hDUgQYlM20HY00jxayWfLiVuf1lsNc5sCZ0v1zN6A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (756)","md5":"befed1a1a13e1af29ee973fe11f593f7","sha1":"162cd8b2633e0f8e1303a85e4e89c217e3a21c4c","sha256":"91bd88ead0a80e2415c329c577385977439f14fb9183c57fd5cbc0c4e500bfe4","sha512":"b83158162f6242263325ddf2006542e80892e72343e71c7ee7534176dae1097e0ad6081a98db96bc35babe0067503f7f7ff9081b291a4b4a6bfd153ddfd88cff","ssdeep":"","tlshash":"062123d7dc11e91d52208a9475b0f20c85869a0ddb53dc9c95bd50368a24b9e8c75c64","first_seen":"2026-04-17T00:42:36.073334Z","last_seen":"2026-04-18T12:51:41.307087Z","times_seen":8,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":219,"dns":41,"connect":1,"send":0,"wait":261,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/assets/login.8d1f7ec0.css","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:52.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:22:2C:06:7C:F7:60:E2:00:D8:75:A5:16:3C:F0:6D:35:12:F6:A9","sha256":"A2:B0:3C:02:0F:09:7A:78:65:5D:9B:E6:20:FC:1A:99:B6:C6:33:AF:64:FF:07:B3:78:1D:B4:83:04:C8:B1:FF"}}},"request":{"raw":"GET /assets/login.8d1f7ec0.css HTTP/1.1\r\nHost: bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/register\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sat, 18 Apr 2026 12:45:53 GMT\r\ncontent-encoding: br\r\nlast-modified: Tue, 14 Apr 2026 14:06:41 GMT\r\nexpires: Mon, 20 Apr 2026 12:45:53 GMT\r\ncache-control: max-age=172800, public, no-transform\r\netag: W/\"69de49f1-a59\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: nmYtpmWS-X2biyzG5gpP4Mcz_KLZG4XCp5AzPReNNLLvEpjOkCHSHQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2649,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2648)","md5":"503b97cdc95108f941030eb1c01d201f","sha1":"6dfdd198a0f97cb2e67aca865291861f79589f93","sha256":"adc27c8fc06250aae3c1817c514ff88384893d3ca706a2c8124a20636512b6f9","sha512":"ab7bd818432678251dd90494ce209d7721951ac3bc348973b8b763768ec5ff975aaedebe16424ebe73aaf68e3757abcd856820e9b394d4f57269621a3731234f","ssdeep":"","tlshash":"515100216c4f692cb03be062a4f011ec6108c783e5a25f7dca6539ecd9c36d62e3b2c1","first_seen":"2026-04-17T00:42:36.080437Z","last_seen":"2026-04-18T12:51:41.314355Z","times_seen":8,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bethash.bet/api/getConfig","fqdn":"api.bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:54.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 26 Oct 2025 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:2B:30:37:50:F6:61:76:8A:6C:6D:7A:B3:11:E8:CF:20:CD:5C:01","sha256":"C4:5A:3D:6D:5A:90:2C:4A:57:BF:0B:B6:77:9B:C1:D6:1A:C7:CD:B8:83:F8:E5:10:AF:7A:01:1E:DD:65:43:7B"}}},"request":{"raw":"OPTIONS /api/getConfig HTTP/1.1\r\nHost: api.bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,langcode,user-device\r\nReferer: https://bethash.bet/\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nserver: nginx/1.18.0 (Ubuntu)\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: true\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Sat, 18 Apr 2026 12:45:53 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN,langCode,User-Device\r\naccess-control-expose-headers: Authorization, authenticated\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 17iv03cQ0PuYhh7Rc0m19dAe7Bmpg9WV7XL2sZfAD-yAvhGnMALVEQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T19:23:17.056279Z","times_seen":13908128,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.turingfraud.net/event/report","fqdn":"www.turingfraud.net","domain":"turingfraud.net","tld":"net"},"ip":{"addr":"162.62.10.47","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:56.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turingfraud.net","organization":""},"issuer":{"commonName":"DNSPod RSA DV","organization":"DNSPod, Inc."},"validity":{"start":"Wed, 08 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:CC:09:90:24:93:4C:24:02:F1:97:00:C8:51:55:4A:C2:69:C5:FC","sha256":"0A:2F:A1:C2:DB:F8:EA:01:4E:CB:CB:BA:36:3F:00:27:43:7F:9A:66:0D:6F:EE:C5:DE:5C:E4:35:39:3B:3D:06"}}},"request":{"raw":"POST /event/report HTTP/1.1\r\nHost: www.turingfraud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/json\r\nContent-Length: 324\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":324,"data":"{\"channel\":400058,\"platform\":4,\"events\":[{\"id\":\"EId_TId_Init_Start\",\"content\":\"{\\\"t\\\":1776516356708,\\\"ret\\\":0,\\\"msg\\\":\\\"\\\"}\"},{\"id\":\"EId_TId_Init_End\",\"content\":\"{\\\"t\\\":1776516356711,\\\"ret\\\":0,\\\"msg\\\":\\\"\\\",\\\"dur\\\":3}\"}],\"buildno\":200500,\"uuid\":\"917874a8e3524464a294deb44a7edc09\",\"seq\":\"140c1141-c312-4945-8948-c1547dba4780\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:45:56 GMT\r\ncontent-type: application/json\r\ncontent-length: 9\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, Traceparent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7356645231da9cfecc34610420982100","sha1":"4e6d5bf58d719360518ecccb073248d0293dd346","sha256":"2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822","sha512":"c092af8c828b98fb9ac62ec48f64c01907d25106e96096a40e52d770f732442c729c11c34406dd0be1690620d91d97a6a4839ca409b57e227a65844e17bad112","ssdeep":"","tlshash":"8c50003000000c03000c0c0000000003c0030c0030000c0000000c000000c000300000","first_seen":"2023-04-05T16:48:03Z","last_seen":"2026-04-18T12:51:41.283057Z","times_seen":1670,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.turingfraud.net/event/report","fqdn":"www.turingfraud.net","domain":"turingfraud.net","tld":"net"},"ip":{"addr":"162.62.10.47","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:58.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turingfraud.net","organization":""},"issuer":{"commonName":"DNSPod RSA DV","organization":"DNSPod, Inc."},"validity":{"start":"Wed, 08 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:CC:09:90:24:93:4C:24:02:F1:97:00:C8:51:55:4A:C2:69:C5:FC","sha256":"0A:2F:A1:C2:DB:F8:EA:01:4E:CB:CB:BA:36:3F:00:27:43:7F:9A:66:0D:6F:EE:C5:DE:5C:E4:35:39:3B:3D:06"}}},"request":{"raw":"OPTIONS /event/report HTTP/1.1\r\nHost: www.turingfraud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bethash.bet/\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:45:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 9\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, Traceparent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7356645231da9cfecc34610420982100","sha1":"4e6d5bf58d719360518ecccb073248d0293dd346","sha256":"2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822","sha512":"c092af8c828b98fb9ac62ec48f64c01907d25106e96096a40e52d770f732442c729c11c34406dd0be1690620d91d97a6a4839ca409b57e227a65844e17bad112","ssdeep":"","tlshash":"8c50003000000c03000c0c0000000003c0030c0030000c0000000c000000c000300000","first_seen":"2023-04-05T16:48:03Z","last_seen":"2026-04-18T12:51:41.283057Z","times_seen":1670,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.icu/","date":"2026-04-18T12:45:50.590Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 313\r\nOrigin: https://bethash.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T19:23:17.056279Z","times_seen":13908128,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/index.html","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T12:45:47.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:45:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Feb 2026 06:00:36 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zL%2FJk0xN3r3N0UFk0asR64Ph%2BjDpssLy4jmzbwHvB%2F5UFm4JSHHLdjZh2EHmJoUew43Bld8rmuVIaZBEUbNZ1YtiQqq1lLht2427BEu5g%2FpNLcgcxAZA81n9AAvnksVVLGk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ee3c4c3ec0e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11526,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (587), with CRLF, LF line terminators","md5":"0c1ba6cedd1efc3efe4d1b0d470ea608","sha1":"51a8cab4effb4c49589e16d7d0a4c4345427ac28","sha256":"0d5fcf5a46a480a6c8964da6649d31f3e5c8bd78c6c3220529c937591af32306","sha512":"5bb55564950e065a4f3717f0ef3ddf3e203d70889b814cc98d5f876ae7939904ae2a11e11aca89d036dc0e03ff7cefd2d110577dac0b1acfe177e70ba0a1bef0","ssdeep":"192:KI8FM5wEszj04KkHMSlg2V18Fhsax2sw3YehQ3OWgwR1PtQkDk1U2lIBSZGJz2mD:K3xEszjFK4zl9VIhs82roEI/fz17Dk1A","tlshash":"6d321e2166c418170372b0d855703f08eda1fb52fb9659c772eeba9b5b60fdd4d0b888","first_seen":"2026-04-18T12:46:26.935911Z","last_seen":"2026-04-18T12:51:41.284141Z","times_seen":4,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/assets/login.4af18a7f.js","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:52.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:22:2C:06:7C:F7:60:E2:00:D8:75:A5:16:3C:F0:6D:35:12:F6:A9","sha256":"A2:B0:3C:02:0F:09:7A:78:65:5D:9B:E6:20:FC:1A:99:B6:C6:33:AF:64:FF:07:B3:78:1D:B4:83:04:C8:B1:FF"}}},"request":{"raw":"GET /assets/login.4af18a7f.js HTTP/1.1\r\nHost: bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bethash.bet/register\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sat, 18 Apr 2026 12:45:53 GMT\r\ncontent-encoding: br\r\nlast-modified: Tue, 14 Apr 2026 14:06:41 GMT\r\nexpires: Mon, 20 Apr 2026 12:45:53 GMT\r\ncache-control: max-age=172800, public, no-transform\r\netag: W/\"69de49f1-ce3\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: vaV-yBJ6-zrQ4nwXsW0jQhQUtJB1oXijSAibAvmFlD58AtbmDSxPkA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3299,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3298)","md5":"326f993fcf46a737902c9eba084f110c","sha1":"44a183bb22cbd17afaf2cc11a95098ca3d18008b","sha256":"b4b44bcf0e547c0f150691b55fab3d06c3787ee99b4c47780d5efad16a875dc4","sha512":"5fab21f48b7e34cf779de3d2c1c86268c9dbf551e12f2bc018238e072063f110b6de9da931569f04aea69b2cbc92d0e985d0a5b860971cd73a5869e5d8e29f92","ssdeep":"","tlshash":"8361be9af81e8a3ac9765544c4b6240c390d2ff46250af7f5cf88e253fd5e6d270e2a0","first_seen":"2026-04-17T00:42:36.056852Z","last_seen":"2026-04-18T12:51:41.287836Z","times_seen":8,"resource_available":true,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/js/jquery1.9.1.js","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:47.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/js/jquery1.9.1.js HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/index.html\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-1112e\"\r\nexpires: Sun, 19 Apr 2026 00:45:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FUZvNkoUaiRNZM8qHFkGtVp5qhghoyi%2BoLmVSU1iZO0uKGYBt157QFLtsUdI%2F3%2F8v%2BdLWdpoulzOKGjNwimkGlLpXL4ny8rGi6kBCgyVJXDg%2Fmw4zN5bcsJdF3KBHM8enA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4c67a1a0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69934,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f6131fa1b49aa9af97cd8dbc5e6c1abf","sha1":"337e52292defcb737a997ffe12709baf3f3e52bf","sha256":"28461bdb3d26e84e6ac6748d6192516ea0e058f1475ed0195ddb8e98f4d01b1c","sha512":"fd272ae8022558d7515347f51b6a11d1accfcfcb34a9fbf6f60993f1a0a52495c791f53cce59aa6206f59aad37e9e90f36c52500380e923121c7e50b9b665cd3","ssdeep":"1536:9RGu+0mf0GlH5+gdK0VorwDAd7c0Fz51bdEZpW+03c:9UffR+KK0VorUAdo+16T","tlshash":"a2633af550d4803323e0e3da135285d2f7a384be3e17dc5af268ff5853a0e1aa197a56","first_seen":"2023-03-11T10:52:10Z","last_seen":"2026-04-18T12:51:41.279847Z","times_seen":29,"resource_available":true,"data":null}},"time_used":1150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":934,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/public/upload/system/2018/08/02/10ea05d1385576f2927c53de76825d08.jpg","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:47.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /public/upload/system/2018/08/02/10ea05d1385576f2927c53de76825d08.jpg HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/index.html\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-42a5\"\r\nexpires: Mon, 18 May 2026 12:45:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMQCeNcmzsvbGj1cJij0%2B5G03uqd%2FKS6dOXRpqCcOrKz%2Bt803CnDN7Sol%2FKBhR57ySUSq%2F91Ih6YCRD7KA4F2DrKLenuxGd%2FaF2c%2FATMwfsxMK%2BMr2fsal0F4O8jdlAh4Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4c68a1d0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17061,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=92, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=180], baseline, precision 8, 180x92, components 3","md5":"aa4f58f8f28a2b69dfd108d7e5c50e2d","sha1":"3a4079105f5e18a059eb20be6b5ad040f5a1c6e6","sha256":"1c8b6ac2743788d4b7319b9da8ea4a0a440867179ad9065c7b0fd094ab3bfa29","sha512":"52b177428fb66bbd35a9203566406ff56f3e37b6cf9bbae875e4667b30f8ff1031443afbcc6f949bb2546ccb4c9b7de6760940abe974d360344118ec4bb0fbea","ssdeep":"384:79DTO1FAPiCYDTO1yqnOQqTI/qsvvvvhXsVz174OZUp9jza:79DTO1FAPsDTO1yqRqsvvvvhcR17RyXa","tlshash":"57726b1ab2a0cfd0f8c912b69ca1ef1797d19c415b973056fdde38897bb23a4884c246","first_seen":"2025-08-14T04:55:24.363027Z","last_seen":"2026-04-18T12:51:41.310972Z","times_seen":15,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/assets/main.4821d4f2.css","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:51.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:22:2C:06:7C:F7:60:E2:00:D8:75:A5:16:3C:F0:6D:35:12:F6:A9","sha256":"A2:B0:3C:02:0F:09:7A:78:65:5D:9B:E6:20:FC:1A:99:B6:C6:33:AF:64:FF:07:B3:78:1D:B4:83:04:C8:B1:FF"}}},"request":{"raw":"GET /assets/main.4821d4f2.css HTTP/1.1\r\nHost: bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/register\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sat, 18 Apr 2026 12:45:51 GMT\r\ncontent-encoding: br\r\nlast-modified: Tue, 14 Apr 2026 14:06:41 GMT\r\nexpires: Mon, 20 Apr 2026 12:45:51 GMT\r\ncache-control: max-age=172800, public, no-transform\r\netag: W/\"69de49f1-4954b\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: FzVpLMfUXCeXZnEkD7a9SBvKyXmsp6Lji4f3PwtqatAKxph4WV5rBw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":300363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"31e2160323dd36f8d7f8d08ebc8ed9ca","sha1":"7d2de58110a2c1431473fe1bd7f287e4d0b2a374","sha256":"4744f1cc150d0937c0d9f221847a0ac3c1d35140ae3153f20b18033b4e5cd14a","sha512":"30c834941bdb91b805cfe635944f9619ef90d5ab751d10c8181d975342c7d6019fad976757e16da9dc16c2567f09f37f2c000464b7fab62a2aa20e18b7696f1d","ssdeep":"6144:ANUxkF3KCkZkw71ZACkFDS3vyf58rBe105TdkZtww1OA7k6Dv3+yu5trGeW0OTxo:ANXpKfZkw71ZACkFDS3vyf58rBe105Td","tlshash":"f95487ba5652222960334ab3d7cc5d98562dc66356630dee77413c0bcb82fde339a31b","first_seen":"2026-04-17T00:42:36.065935Z","last_seen":"2026-04-18T12:51:41.280421Z","times_seen":8,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bethash.bet/api/getConfig","fqdn":"api.bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:54.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 26 Oct 2025 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:2B:30:37:50:F6:61:76:8A:6C:6D:7A:B3:11:E8:CF:20:CD:5C:01","sha256":"C4:5A:3D:6D:5A:90:2C:4A:57:BF:0B:B6:77:9B:C1:D6:1A:C7:CD:B8:83:F8:E5:10:AF:7A:01:1E:DD:65:43:7B"}}},"request":{"raw":"OPTIONS /api/getConfig HTTP/1.1\r\nHost: api.bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,langcode,user-device\r\nReferer: https://bethash.bet/\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nserver: nginx/1.18.0 (Ubuntu)\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: true\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Sat, 18 Apr 2026 12:45:53 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN,langCode,User-Device\r\naccess-control-expose-headers: Authorization, authenticated\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: _96gqjTMOtcX8YB-ju3PJhT_9QEzUt9Y_swYNVd6icNMEpvEWM_T3g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T19:23:17.056279Z","times_seen":13908128,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EV1YS9GR4D","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:55.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-EV1YS9GR4D HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 12:45:55 GMT\r\nexpires: Sat, 18 Apr 2026 12:45:55 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157084\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":473272,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"3addcf2b8c9f8d968a8f6abfac7b7492","sha1":"0b53f8f2448ed7db92671e41d7deb55118712467","sha256":"04430404ec305b6905e033812c96f5303bde8956b41751f7a6008d7d5f2839d0","sha512":"15faf942dc9fcca14e26c6195dfa68ee1e57d0eb28bf7889c6d7cc1912eca895e2a9b8861f7a05da0a4aa44beb986aeea9e294b5f833abfdf02d35c699810aac","ssdeep":"6144:jF4OjKg7CA4MRBRfrJPj8B3v0yIjwcHCpLUgW6w01V91XG:x7t4MtfrJL8p5WOW","tlshash":"67a409ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","first_seen":"2026-04-18T12:45:36.447503Z","last_seen":"2026-04-18T12:51:41.321297Z","times_seen":6,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":92,"dns":1,"connect":7,"send":0,"wait":27,"receive":27,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"global.turing.captcha.gtimg.com/dy-jy3.js","fqdn":"global.turing.captcha.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:56.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turing.captcha.gtimg.com","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BA:08:F4:14:CE:A1:19:41:5B:1B:49:47:36:ED:5D:D9:75:EB:21:B8","sha256":"1B:6A:3C:E4:2D:7F:45:5A:83:7F:AB:6F:F6:D8:95:42:54:4E:56:C7:0C:45:D1:05:D6:A0:4E:78:62:A2:88:5D"}}},"request":{"raw":"GET /dy-jy3.js HTTP/1.1\r\nHost: global.turing.captcha.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 15 Jul 2024 06:43:44 GMT\r\nContent-Encoding: gzip\r\nEtag: \"626436a6c87a002eb7e8a99c6f5f96b6\"\r\nContent-Type: text/javascript\r\nDate: Tue, 17 Jun 2025 07:43:35 GMT\r\nServer: tencent-cos\r\nx-cos-hash-crc64ecma: 15729484442061824980\r\nx-cos-request-id: Njg1MTFjYTdfZWVlZjc4MGJfMzk4Ml85NzNlMjk3\r\nx-cos-storage-class: MAZ_STANDARD\r\nx-cosindex-replication-status: Complete\r\nContent-Length: 30884\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10848256553662551395\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89391,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"626436a6c87a002eb7e8a99c6f5f96b6","sha1":"67d9732c33dc7689a98e63af2a97b0912f290762","sha256":"2a5fc3ad9f9e68e6de662de3e43661e1e8e447df0929efc64c0f067be2d9c455","sha512":"36dac1d5ea743f78e2fa1a503ce5d4448497717589529d1946edde1e474968d116bb21cea723ce8cf3cbb7d6b195d347588a0aa00473b5f41808dda1ee50369c","ssdeep":"1536:BjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:BYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"7c93f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8eabc78a4e827bf7d","first_seen":"2023-03-09T21:24:24Z","last_seen":"2026-04-18T16:43:33.874379Z","times_seen":1112,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.turingfraud.net/event/report","fqdn":"www.turingfraud.net","domain":"turingfraud.net","tld":"net"},"ip":{"addr":"162.62.10.47","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:58.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turingfraud.net","organization":""},"issuer":{"commonName":"DNSPod RSA DV","organization":"DNSPod, Inc."},"validity":{"start":"Wed, 08 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:CC:09:90:24:93:4C:24:02:F1:97:00:C8:51:55:4A:C2:69:C5:FC","sha256":"0A:2F:A1:C2:DB:F8:EA:01:4E:CB:CB:BA:36:3F:00:27:43:7F:9A:66:0D:6F:EE:C5:DE:5C:E4:35:39:3B:3D:06"}}},"request":{"raw":"POST /event/report HTTP/1.1\r\nHost: www.turingfraud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/json\r\nContent-Length: 323\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":323,"data":"{\"channel\":400058,\"platform\":4,\"events\":[{\"id\":\"EId_TId_GT_Start\",\"content\":\"{\\\"t\\\":1776516358829,\\\"ret\\\":0,\\\"msg\\\":\\\"\\\"}\"},{\"id\":\"EId_TId_GT_End\",\"content\":\"{\\\"t\\\":1776516358864,\\\"ret\\\":0,\\\"msg\\\":\\\"\\\",\\\"dur\\\":2144}\"}],\"buildno\":200500,\"uuid\":\"917874a8e3524464a294deb44a7edc09\",\"seq\":\"c4d1c9f3-e7e3-4da2-b7d1-9727ed15fda2\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:45:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 9\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, Traceparent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7356645231da9cfecc34610420982100","sha1":"4e6d5bf58d719360518ecccb073248d0293dd346","sha256":"2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822","sha512":"c092af8c828b98fb9ac62ec48f64c01907d25106e96096a40e52d770f732442c729c11c34406dd0be1690620d91d97a6a4839ca409b57e227a65844e17bad112","ssdeep":"","tlshash":"8c50003000000c03000c0c0000000003c0030c0030000c0000000c000000c000300000","first_seen":"2023-04-05T16:48:03Z","last_seen":"2026-04-18T12:51:41.283057Z","times_seen":1670,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/images/17.png","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:49.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/images/17.png HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/template/pc/skin/css/index.css\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-b32\"\r\nexpires: Mon, 18 May 2026 12:45:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UeCJdEbRWCMpa7sGKcSBhWZnAxwhMg3UuxoTQN%2FZwBGsiWjxdqdYTot3RcwHZes9zIXl9aNimTxZn9VlZLtxz%2FuGhZCr9i3YtVDH7RCSxZChSk0n43A32mgy2B1Hr2yzzUo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4ce4a710b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2866,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 8, 8-bit/color RGBA, non-interlaced","md5":"48304345e7428d2402ba3660e8fd0b69","sha1":"df5d4d5cda5f362af2d7bc8f47167f4c29c4ce87","sha256":"8555df17e36c2139d150e96e2c966f01c6970a9abea3b2b3a20a1db6e771b585","sha512":"c5b8ec54506a0a5056cfbd451aa9bc14ff56df0f1cca17bebf47cd80ad3b56cd8aa7bd27a384e874f1a1d56a791f0a808b48405e9ef76ca5e9fb9b761b60ab0f","ssdeep":"","tlshash":"98513d8d9840496f104e06bb397fde054a67e794539d1e0cddfe834f8620c517c75b6a","first_seen":"2025-08-14T04:55:24.273034Z","last_seen":"2026-04-18T12:51:41.291009Z","times_seen":13,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ca.turing.captcha.qcloud.com/data/1941/forward","fqdn":"ca.turing.captcha.qcloud.com","domain":"qcloud.com","tld":"com"},"ip":{"addr":"43.158.119.130","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:58.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turing.captcha.qcloud.com","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 15 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"97:D5:C4:59:CC:DB:39:C1:09:48:A2:5C:F1:CA:F9:65:FD:86:E4:8F","sha256":"A6:65:54:11:17:3C:C3:1A:6F:AA:C1:D8:E6:1D:0F:59:2D:E8:DF:E7:8F:D2:BB:F9:40:83:5D:1E:01:65:D9:30"}}},"request":{"raw":"POST /data/1941/forward HTTP/1.1\r\nHost: ca.turing.captcha.qcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/json\r\nContent-Length: 17233\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":17233,"data":"{\"req\":{\"content\":\"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\",\"channel\":\"400058\",\"token\":\"aoXVyDnE66OKH1GsibeDW5EMd5JfDPZk8ztD3ZPKCIFW15eDsMEMfhM6HfhBbCOivSKvwA==\",\"version\":\"1\",\"type\":\"0\",\"timestamp\":\"1776516358324\"}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 18 Apr 2026 12:45:58 GMT\r\nContent-Type: application/json\r\nContent-Length: 602\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: no-cache\r\nServer: JPrxServer\r\nAccess-Control-Allow-Origin: https://bethash.bet\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":602,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f2d5e91c98d151856470a16c323b3d1f","sha1":"bc82457b6e1bcb94bffcb3d427d336cf884ccbcf","sha256":"575e107df4f860d3402b92aac45399314dca86f404cd89cb367e801d1c2cc028","sha512":"d683e4fa6e258b88261c8fcc5552c5a4b86dc5fa0202324f50bcea77e2f0d89d002f1de195d130871c6d8b87e150fa633d9a1cbba96f64f1952616a74e9dedf6","ssdeep":"","tlshash":"38f041e320f4086459d8a6110eb3ac922b062126680857c3d4a3edabc2230093782ff9","first_seen":"2026-04-18T12:46:26.94701Z","last_seen":"2026-04-18T12:46:26.94701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":2,"connect":20,"send":0,"wait":375,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.turingfraud.net/event/report","fqdn":"www.turingfraud.net","domain":"turingfraud.net","tld":"net"},"ip":{"addr":"162.62.10.47","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:56.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turingfraud.net","organization":""},"issuer":{"commonName":"DNSPod RSA DV","organization":"DNSPod, Inc."},"validity":{"start":"Wed, 08 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:CC:09:90:24:93:4C:24:02:F1:97:00:C8:51:55:4A:C2:69:C5:FC","sha256":"0A:2F:A1:C2:DB:F8:EA:01:4E:CB:CB:BA:36:3F:00:27:43:7F:9A:66:0D:6F:EE:C5:DE:5C:E4:35:39:3B:3D:06"}}},"request":{"raw":"OPTIONS /event/report HTTP/1.1\r\nHost: www.turingfraud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bethash.bet/\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:45:56 GMT\r\ncontent-type: application/json\r\ncontent-length: 9\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, Traceparent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7356645231da9cfecc34610420982100","sha1":"4e6d5bf58d719360518ecccb073248d0293dd346","sha256":"2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822","sha512":"c092af8c828b98fb9ac62ec48f64c01907d25106e96096a40e52d770f732442c729c11c34406dd0be1690620d91d97a6a4839ca409b57e227a65844e17bad112","ssdeep":"","tlshash":"8c50003000000c03000c0c0000000003c0030c0030000c0000000c000000c000300000","first_seen":"2023-04-05T16:48:03Z","last_seen":"2026-04-18T12:51:41.283057Z","times_seen":1670,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":77,"dns":1,"connect":20,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/public/upload/system/2018/08/02/8de871bfa977c5bc4273c7b90c21c84e.png","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:47.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /public/upload/system/2018/08/02/8de871bfa977c5bc4273c7b90c21c84e.png HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/index.html\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-1052\"\r\nexpires: Mon, 18 May 2026 12:45:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HbXrEs%2FGK1Xh12u0AWUJ1I%2FCnvCpgMxpHuZvSEenLHaAkRc7qKyo03oUrMdcDjku04O4diaO3AHB433h5pV5VFN0llON9vVdFlwQ%2BW%2BfpSNNn7pmfP9OTnryroY21GQBJbc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4c6ba280b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 131 x 53, 8-bit/color RGB, non-interlaced","md5":"e05eb8a4132b8e99c3b45187bb7df8f9","sha1":"146d600475a00f5c441b2f11345f274c50d3df77","sha256":"1410494c1643f4758561637860175dad2c6a8d1d04f276701417286c6fc48dbc","sha512":"097b4d610a69d7702345fcad07fdd7d0794fd086dba5f197cab9bd716b62f166d8c399363a225f7e3e973d9e104bbc18c2cad4bdd33e95e1ebaadd24e2bf0294","ssdeep":"96:0SMllcHitlIxv9vk7C1+I4wWHLihk/x6KNysZeuCMrI1ICML:0SHIIHUCD4waUkKh+VL","tlshash":"1d815dcc8624451f154a4fae3d6ade038e3bf5c445383d189bfe830ee511861ad393a3","first_seen":"2025-08-14T04:55:24.358465Z","last_seen":"2026-04-18T12:51:41.285633Z","times_seen":15,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bethash.icu/","fqdn":"bethash.icu","domain":"bethash.icu","tld":"icu"},"ip":{"addr":"104.21.33.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:49.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 16:10:57 GMT","end":"Sat, 30 May 2026 16:10:56 GMT"},"fingerprint":{"sha1":"F0:09:BD:76:0A:96:0F:9A:F8:96:8F:77:16:3C:F7:DD:F9:9D:69:4D","sha256":"B5:39:79:F6:AA:48:AB:76:07:92:2E:BC:D0:1A:DA:68:F9:17:B0:BF:92:C2:3A:18:B2:A2:03:93:C5:D5:74:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bethash.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:45:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 22 Nov 2025 05:08:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6G%2ByRzj2KB%2FtVYPX4vW8yRqtwPUw28rWwhK4MJDSSgAmdTuUAQeiThc3LUiZJv8Rd2Db55sDEdz%2ByimzsOCymOgXYRMJfevwqUv0Yu5qnERjdCCcvAEuGFo6ZdtKw%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ee3c4ced9ff4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":523,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"95c1117f7daf560d59d0eb7236d1139c","sha1":"b756dea7a9593a808096454b2495177a5cfc56ee","sha256":"371c290826472559f35d57e4333bb8d0ae7b37e7615235a380a531f288431432","sha512":"c93251be8ffffe894170aecf8d372c385d9b9438ce7213cd96d9f25494edca8942dcc6ec37f08db8b9c5904dbdca04dcb5f67e80ff62e337da08ded4bb149eec","ssdeep":"","tlshash":"8ff09edb0c12880e01b09a311de2f21e56fb44e4d609d881fac3e4c7189db868da73bd","first_seen":"2025-12-07T12:04:58.61686Z","last_seen":"2026-04-18T12:51:41.312198Z","times_seen":10,"resource_available":false,"data":null}},"time_used":945,"timings":{"blocked":109,"dns":92,"connect":1,"send":0,"wait":726,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/images/3.png","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:49.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/images/3.png HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/template/pc/skin/css/public.css\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-d16\"\r\nexpires: Mon, 18 May 2026 12:45:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qE0jQ89FbJAqQk9vG5SUtgOGNsjrrNzFEVEYEtMAE24395eFkBeLbSwLzWgRxSxk1FrICILUMTSqCCwX%2FdCkdErmzYK5nBH4ExWaalZ9oLykg%2BU302AK%2Fyl1R2NJNTui1Xs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4ce3a6e0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 31 x 31, 8-bit/color RGBA, non-interlaced","md5":"69149bb0de47b5087552b53f6888407e","sha1":"a928445d89770abcba9d86e63b70af420efac9ec","sha256":"7afabec03692027a88a54079297e1ba8d76d827909ecfcf22ad9352e49ae973f","sha512":"c7912a7ea943df9ab08b605cb5f2dacc013b74e07464b8267f82ab6cbdce182bd374594ff94e7790cda1dec7e210511eff7b3daddb665e3e70cbf2dc04a9f8d5","ssdeep":"","tlshash":"63615c8899400d2d108e0aa9216bda0d4e37aad4836d5f1cedbe821f8620d913c7576b","first_seen":"2025-08-14T04:55:24.294411Z","last_seen":"2026-04-18T12:51:41.286163Z","times_seen":16,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":705,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/assets/pathseg.8e50599e.js","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:52.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:22:2C:06:7C:F7:60:E2:00:D8:75:A5:16:3C:F0:6D:35:12:F6:A9","sha256":"A2:B0:3C:02:0F:09:7A:78:65:5D:9B:E6:20:FC:1A:99:B6:C6:33:AF:64:FF:07:B3:78:1D:B4:83:04:C8:B1:FF"}}},"request":{"raw":"GET /assets/pathseg.8e50599e.js HTTP/1.1\r\nHost: bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/assets/main.ecaab409.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sat, 18 Apr 2026 12:45:52 GMT\r\ncontent-encoding: br\r\nlast-modified: Tue, 14 Apr 2026 14:06:41 GMT\r\nexpires: Mon, 20 Apr 2026 12:45:52 GMT\r\ncache-control: max-age=172800, public, no-transform\r\netag: W/\"69de49f1-9bbe\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: vRQSmVzVRjvX_T0R2pNiN81RS21NCfBQ6J5crXh_IXooSTA8hAyWZQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39870,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30789)","md5":"4abc45fac2e718d0fbdde7b49d94eefe","sha1":"b1fe7c6ace1a17ba8f0f56c2c93e75f4e80c806b","sha256":"4a1921893f8fe2d43c35077b4613c738e348e866c6ce8b2ea5d238e9e5ef2ae7","sha512":"861a86d99e2c8f148b931e318defde6d6a647f7433b682b7cede601cdf7c4cd7b403fe4b543e23be16a694a63d177eb84cb093a7e29ea53afe24ee2c4e81e2a4","ssdeep":"768:GCOCz2cv5dYTaulgQwKKh9eE8/nyjyUCJ8:GCOCicv5dYTaulgQw3s8","tlshash":"1003f150b5557669029ed2c6113f3a0bb33b54ec8808e09cf35dd4cef868887d99abbd","first_seen":"2025-05-28T04:51:10.295799Z","last_seen":"2026-04-18T12:51:41.28252Z","times_seen":40,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/resource/loading.gif","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:51.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:22:2C:06:7C:F7:60:E2:00:D8:75:A5:16:3C:F0:6D:35:12:F6:A9","sha256":"A2:B0:3C:02:0F:09:7A:78:65:5D:9B:E6:20:FC:1A:99:B6:C6:33:AF:64:FF:07:B3:78:1D:B4:83:04:C8:B1:FF"}}},"request":{"raw":"GET /resource/loading.gif HTTP/1.1\r\nHost: bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/register\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 274364\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sat, 18 Apr 2026 12:45:51 GMT\r\nlast-modified: Tue, 14 Apr 2026 14:06:41 GMT\r\naccept-ranges: bytes\r\nexpires: Mon, 20 Apr 2026 12:45:51 GMT\r\ncache-control: max-age=172800, public, no-transform\r\netag: \"69de49f1-42fbc\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: I38Oo2J9zGdae--cR-mi0itEG7J0sBtCDxDN_MoQs_cuR62rH4XIRQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":274364,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 353 x 370","md5":"8d744031c2bfe2012884005c5c4b7360","sha1":"93f681b4d3c1f32a64f74215c110ceb06c23f165","sha256":"b8c8cec7becdadf09e1112be6962c55d57cb1b5bd61e68e3e60c0a925f00615f","sha512":"5e2e2d2195e432ba2403b83c5c1e6d52e34887fc5d6b9d79bc69adccd09b4b9fe60dd60d5dee9c250c20da30a6fbf1e245257997b624d3596fcb34e15d3b19b3","ssdeep":"6144:GvsVFdYaDyl+ikVjnIZJNhS6kNnYut3yobI4NsyxhEr:GU7/ylvkVjIZJ7SeutiokIREr","tlshash":"b94412d74f5a4ffec8371126606a53db2ca71e80bcf3e1b41b52e69445b2928a04f5f1","first_seen":"2025-05-28T04:51:10.47814Z","last_seen":"2026-04-18T12:51:41.305042Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":939,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/assets/login.4af18a7f.js","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:53.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:22:2C:06:7C:F7:60:E2:00:D8:75:A5:16:3C:F0:6D:35:12:F6:A9","sha256":"A2:B0:3C:02:0F:09:7A:78:65:5D:9B:E6:20:FC:1A:99:B6:C6:33:AF:64:FF:07:B3:78:1D:B4:83:04:C8:B1:FF"}}},"request":{"raw":"GET /assets/login.4af18a7f.js HTTP/1.1\r\nHost: bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/assets/main.ecaab409.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sat, 18 Apr 2026 12:45:53 GMT\r\ncontent-encoding: br\r\nlast-modified: Tue, 14 Apr 2026 14:06:41 GMT\r\nexpires: Mon, 20 Apr 2026 12:45:53 GMT\r\ncache-control: max-age=172800, public, no-transform\r\netag: W/\"69de49f1-ce3\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: VWjJ0_sjMTm55jrgJ8HpLqkXBF5JgVIZ7VdPG8aM2XoBYVW77srNgQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3299,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3298)","md5":"326f993fcf46a737902c9eba084f110c","sha1":"44a183bb22cbd17afaf2cc11a95098ca3d18008b","sha256":"b4b44bcf0e547c0f150691b55fab3d06c3787ee99b4c47780d5efad16a875dc4","sha512":"5fab21f48b7e34cf779de3d2c1c86268c9dbf551e12f2bc018238e072063f110b6de9da931569f04aea69b2cbc92d0e985d0a5b860971cd73a5869e5d8e29f92","ssdeep":"","tlshash":"8361be9af81e8a3ac9765544c4b6240c390d2ff46250af7f5cf88e253fd5e6d270e2a0","first_seen":"2026-04-17T00:42:36.056852Z","last_seen":"2026-04-18T12:51:41.287836Z","times_seen":8,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bethash.bet/api/getConfig","fqdn":"api.bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:54.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 26 Oct 2025 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:2B:30:37:50:F6:61:76:8A:6C:6D:7A:B3:11:E8:CF:20:CD:5C:01","sha256":"C4:5A:3D:6D:5A:90:2C:4A:57:BF:0B:B6:77:9B:C1:D6:1A:C7:CD:B8:83:F8:E5:10:AF:7A:01:1E:DD:65:43:7B"}}},"request":{"raw":"GET /api/getConfig HTTP/1.1\r\nHost: api.bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bethash.bet/\r\nlangCode: en\r\nuser-device: 2\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nserver: nginx/1.18.0 (Ubuntu)\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, private\r\ndate: Sat, 18 Apr 2026 12:45:54 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN,langCode,User-Device\r\naccess-control-expose-headers: Authorization, authenticated\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: cqcJuhDndNnZo26_37-uBUQxtYIBedwE9haELukX18I06vx5Naw8DA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29414,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7b6a443dc05b25c555c97176309397d4","sha1":"7246b295b1a913729f199c91dbaa1a819885d945","sha256":"91fac140307cc157d0f90a1085673ac12f60fc66c3eec8d1cfcd41cfc6eb1ac6","sha512":"a31ecf19877ff1fee9b9666d6ffc9a1d6c44bdaa397090a64c3b125fa885b2e7b9ed084cdddd73cb6bf220910ef6e579f0dc0eb2ac035398ec617613a9f2d7b5","ssdeep":"384:bS6GbOAGS616ttXj/pGEI4ttXjJGpswTLwejI2WwbY:bS8SttXjB64tXj3ejIfw0","tlshash":"06d263bef7fc68a145f141c00d97765b16da31086fca4ca896fbce5c43885a41b2f29b","first_seen":"2026-04-18T12:46:26.95481Z","last_seen":"2026-04-18T12:48:06.575094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ca.turing.captcha.qcloud.com/cap_union_prehandle?aid=189999718\u0026protocol=https\u0026accver=1\u0026showtype=embed\u0026ua=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjA%3D\u0026noheader=1\u0026fb=0\u0026deviceToken=v3%3AAqCgYrCgoGKwlVbbpVvvCR4BrQ9UBlMVuZbvJj8ZhZGSdmOBik2%2FRUjgTZkFJwOTJCZ2T52NTHX5cUmOy0R6seC49GaZ3h5LyjPbUEVoXCYeHfQ7BtZ%2FHVESsUL7ebQqGXYAyIdLq1iSpJZanmuFqqM03xI6Arzh9s5WtKDhGoXCOH11%2F%2BhhT2k3dgcThDZPfwmjZ8SFhhCIOoiURh6HJBO%2BDc2QCL4zxzgqyUnwIHJouBFy0ZTtQIYkDcZPClHm3cquFJSoewUKiL9l52tX%2BN9ihrJtrnBD3GuKMHBfgp1s55IaJJKrIc064mxnT1%2BBNKRq2n1KCkpkCZk9%2BxfMf7zfDmM3FIN7xFhVfS%2FeRcVWIGPriMaFfn3K4OJe%2FXwMCF54YKV6k88L2wthpGKwqug9oWBakqCjioZUhRqVqoCXMR7Y8FbizoR7JYj1L750oLzHL6ue6iF9HlC7e%2B2alSrxCvQRqlWsocd1A%2BSSpstz\u0026isJsVersion=3\u0026aged=0\u0026enableAged=0\u0026enableDarkMode=0\u0026grayscale=1\u0026clientype=2\u0026cap_cd=\u0026uid=\u0026lang=en\u0026entry_url=https%3A%2F%2Fbethash.bet%2Fregister\u0026elder_captcha=0\u0026js=https%3A%2F%2Fglobal.turing.captcha.gtimg.com%2FtgJNCap-global.c89bafa8.js\u0026login_appid=\u0026wb=1\u0026subsid=1\u0026callback=_aq_650475\u0026sess=","fqdn":"ca.turing.captcha.qcloud.com","domain":"qcloud.com","tld":"com"},"ip":{"addr":"43.158.119.130","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:58.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turing.captcha.qcloud.com","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 15 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"97:D5:C4:59:CC:DB:39:C1:09:48:A2:5C:F1:CA:F9:65:FD:86:E4:8F","sha256":"A6:65:54:11:17:3C:C3:1A:6F:AA:C1:D8:E6:1D:0F:59:2D:E8:DF:E7:8F:D2:BB:F9:40:83:5D:1E:01:65:D9:30"}}},"request":{"raw":"GET /cap_union_prehandle?aid=189999718\u0026protocol=https\u0026accver=1\u0026showtype=embed\u0026ua=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjA%3D\u0026noheader=1\u0026fb=0\u0026deviceToken=v3%3AAqCgYrCgoGKwlVbbpVvvCR4BrQ9UBlMVuZbvJj8ZhZGSdmOBik2%2FRUjgTZkFJwOTJCZ2T52NTHX5cUmOy0R6seC49GaZ3h5LyjPbUEVoXCYeHfQ7BtZ%2FHVESsUL7ebQqGXYAyIdLq1iSpJZanmuFqqM03xI6Arzh9s5WtKDhGoXCOH11%2F%2BhhT2k3dgcThDZPfwmjZ8SFhhCIOoiURh6HJBO%2BDc2QCL4zxzgqyUnwIHJouBFy0ZTtQIYkDcZPClHm3cquFJSoewUKiL9l52tX%2BN9ihrJtrnBD3GuKMHBfgp1s55IaJJKrIc064mxnT1%2BBNKRq2n1KCkpkCZk9%2BxfMf7zfDmM3FIN7xFhVfS%2FeRcVWIGPriMaFfn3K4OJe%2FXwMCF54YKV6k88L2wthpGKwqug9oWBakqCjioZUhRqVqoCXMR7Y8FbizoR7JYj1L750oLzHL6ue6iF9HlC7e%2B2alSrxCvQRqlWsocd1A%2BSSpstz\u0026isJsVersion=3\u0026aged=0\u0026enableAged=0\u0026enableDarkMode=0\u0026grayscale=1\u0026clientype=2\u0026cap_cd=\u0026uid=\u0026lang=en\u0026entry_url=https%3A%2F%2Fbethash.bet%2Fregister\u0026elder_captcha=0\u0026js=https%3A%2F%2Fglobal.turing.captcha.gtimg.com%2FtgJNCap-global.c89bafa8.js\u0026login_appid=\u0026wb=1\u0026subsid=1\u0026callback=_aq_650475\u0026sess= HTTP/1.1\r\nHost: ca.turing.captcha.qcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 18 Apr 2026 12:46:02 GMT\r\nContent-Type: text/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=CAO PSA OUR\r\nPragma: No-cache\r\nServer: Trpc httpd, tencent http server\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2734,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2734), with no line terminators","md5":"71452d667a58c990ccc48a030aa67bcb","sha1":"89d6da41f609324c0551c693bcc1ec12e8ff670b","sha256":"3e84463e0318f08e67e1ffb950268c6dd6211f89c0a699783b5d4cb22d878d35","sha512":"0bb18fdccda76a56dd5e865d63408f10baaecbe064d678847742ef1f23ea7aabb612a2c4b5e711f025e617df90881588f8dfd70fac6253db19ce680284adbba4","ssdeep":"","tlshash":"9e51c739963d4a6ba9f07db87431e11c5496301186c809a2dfedca216398db8a31a60d","first_seen":"2026-04-18T12:46:26.956119Z","last_seen":"2026-04-18T12:46:26.956119Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3623,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/public/upload/other/2018/08/02/fb45059262cc7ca8a398cdfe1f44e90c.jpg","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:47.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /public/upload/other/2018/08/02/fb45059262cc7ca8a398cdfe1f44e90c.jpg HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/index.html\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-57b08\"\r\nexpires: Mon, 18 May 2026 12:45:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DU5my%2Bvm8AxeGcC4M3259T87gw9iDSYv5oJvZcXakGtEDT7e7z3xaA2i%2B5IRV9AWNupspkL0MIezf4T9g75vpifNCOjg3947W6bvXAX%2BBcTFwb7BL7R9cQ4QSlS6%2FdbKW8Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4c68a1e0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359176,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x578, components 3","md5":"b762e705b2aa13b4ecad58303e33e628","sha1":"5b92ec87bf327053f675c456fdd2d2618dafa2bc","sha256":"dd385a3f2f9d4318fecf62406f384ba8eb1aaaabce330d0506eb4e5a869dbf81","sha512":"39661a2732192da16161debf90e2414a667683db94b4588884cd8a979aaf81ce33a2079afb20d6b7888730f7f46e7fd82e366c576ee149e0f152a63ec9200fef","ssdeep":"6144:Chcj/HqR0juykA0ic1Hwi+57niileK42VOz8vMDLYWXN2Wde8S:cc+R0qNAEW5GileK42oz06LZNL88S","tlshash":"03742331cba115d986ee84a811cb1b113efd576e5e48d0323b15caff9e0006deae8b47","first_seen":"2025-08-14T04:55:24.314583Z","last_seen":"2026-04-18T12:51:41.281118Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":950,"receive":694,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/images/9.png","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:49.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/images/9.png HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/template/pc/skin/css/index.css\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-c4e\"\r\nexpires: Mon, 18 May 2026 12:45:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XV%2BXZF%2BcAI2yNurLFTGmVxg9tNBHr1h8%2FGM2klzZgypVy9RJXHkG6dY4MwKBzwlwDJFomwZ5ZX4UG%2FK5mhSqSHavuHuW2fY%2F3IV0JmfQBMBw0pdxg%2FJLMLGmAZA6hcoS5Yc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4ce3a700b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3150,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 40, 8-bit/color RGBA, non-interlaced","md5":"31bdcae8b9704397d26ae56433d13781","sha1":"f755493f925cd1cffdef21cd60f03084bf428ecf","sha256":"90bab0ea89f7269f68b0ef99ca4c38f9013705e9b7889140e5d9866e33065684","sha512":"d09d103a73e8c45fae46f218379670dce85a1e20a80985ff0799156c44ea14e9f7468ac12e7001cce843503abbbdf2983d333ca5e4324353a10531a8197593e8","ssdeep":"","tlshash":"47517d4cd845042e10490a6a31bfdc07891bfad453591e0ceebd838e8a31d71bc7a7ae","first_seen":"2025-08-14T04:55:24.281156Z","last_seen":"2026-04-18T12:51:41.28681Z","times_seen":13,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":698,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ca.turing.captcha.qcloud.com/data/1941/forward","fqdn":"ca.turing.captcha.qcloud.com","domain":"qcloud.com","tld":"com"},"ip":{"addr":"43.158.119.130","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:58.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turing.captcha.qcloud.com","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 15 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"97:D5:C4:59:CC:DB:39:C1:09:48:A2:5C:F1:CA:F9:65:FD:86:E4:8F","sha256":"A6:65:54:11:17:3C:C3:1A:6F:AA:C1:D8:E6:1D:0F:59:2D:E8:DF:E7:8F:D2:BB:F9:40:83:5D:1E:01:65:D9:30"}}},"request":{"raw":"OPTIONS /data/1941/forward HTTP/1.1\r\nHost: ca.turing.captcha.qcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bethash.bet/\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 18 Apr 2026 12:45:58 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Headers: Authorization, Content-Type, Origin, Referer, content-type\r\nAccess-Control-Allow-Methods: GET, POST\r\nCache-Control: no-cache\r\nServer: JPrxServer\r\nAccess-Control-Allow-Origin: https://bethash.bet\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T19:23:17.056279Z","times_seen":13908128,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":63,"dns":1,"connect":20,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/css/index.css","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:47.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/css/index.css HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/index.html\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Dec 2019 00:52:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e094a4e-d32\"\r\nexpires: Sun, 19 Apr 2026 00:45:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBAe0gVjRn1%2Fbg9Ig2tf9a%2Boe%2FL8bY%2FW%2FO6KvXdMkA3pYCys9O2mNtk0uR24pswOrupJ0wf1HS9SNrmZhWWVC4xJHgNQZd6eNF%2FsuUHQWlWpvxdJEGymHq284NrNlrjmMxk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4c67a180b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3378,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"a8c6c7ce75b358288807d127150fa8fd","sha1":"58209d03fd0783adb1195c34d4bdfcafa267770f","sha256":"837f46a635330bc15fe4e0271f5d20cc1f3f60c8046bd7c8474ee616861b2ecd","sha512":"d63c4030e7ce798a6552c1d712940e80e30b6e0a683241aadbf213b874620f5bee7e0c19a7a435d9731a775c4581bca50df09e5b312825862bd811f356f6f0dc","ssdeep":"","tlshash":"f561247c492e358b730b5a99b7b19b558fd85098ab0f2adcf47468e1a15b014277f3c0","first_seen":"2025-08-14T04:55:24.298606Z","last_seen":"2026-04-18T12:51:41.279036Z","times_seen":14,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/public/upload/other/2018/08/02/7fb2a96e41614bc90f1a3080ca655e65.jpg","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:47.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /public/upload/other/2018/08/02/7fb2a96e41614bc90f1a3080ca655e65.jpg HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/index.html\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-43d72\"\r\nexpires: Mon, 18 May 2026 12:45:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4kQfrUdHKuR6HIEHsDzZhfyZO4AYQegG1aW0lJg9l2TTVi1k6IHdPEWq2MEYdM%2BpF9o6HbXhsJCVqZ8JpOkZz9JbZI1JSC8d9hlHJWufi%2B7b0TOQlcrmIe34efPetmAMos%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4c6ba270b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277874,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x578, components 3","md5":"c3c3bacf287f0c88449f31e7c9f597cd","sha1":"a32f90176c3f377ef63c2fe30d2da58f4e6d5794","sha256":"031fa5681990eb0b1165ed55bbd8b875e16fb781c04d5137acc8fb65b9ebe681","sha512":"7b0a6c457dc8c7af57ae2eb223e8551cc6fbd8520d5815e425ee799fa08c6929c563161f3f84196613ddf1adf59c8d5f4bb655aa0df0b5f9b55256273bbbc99f","ssdeep":"6144:jJSZbDzKPEED+0HHpp8Q2lLvayhkhnRbH0:jchzKe+ppR2LvhontU","tlshash":"f84423c5fb1f0f907b6aa19c97ce7c9e31062c3caa106d4a79b56d8857853b48e04df8","first_seen":"2025-08-14T04:55:24.324412Z","last_seen":"2026-04-18T12:51:41.311485Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":948,"receive":698,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/favicon.ico","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:50.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/index.html\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:50 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 05 Jun 2025 07:59:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68414e74-423e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BkqorvJgo6K70f7VUysoFp4Pi8H8BErna8Gskvwlw5aNoGjFh9S%2F8y0IYRfMTadSPnROvVgekaRRLz%2BE8%2FaGAFwH47ytqbNx%2FikhXyTBcSliXJvAjjBJkm7dLtlUEFgsTU%3D\"}]}\r\ncf-ray: 9ee3c4d38aa90b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"c389e235ee2dbf548345e5d935df3914","sha1":"6c95444d7c528ddf1155ffba820216cbe558ef9c","sha256":"97f7cc31f8ab12cd37303681cdd703c41ea403be5d4f7a407ff23260c09c5959","sha512":"dbb92622091410f4eb37ff8e3220c1fe5ab5df23d63ff18a3a17b528058379a1ca60f89c4f909286d57c72c9a3fe1ebf6cc89e958c002db1cc7b2dd210be81b2","ssdeep":"384:xXKe0NuSG/PVSGyr4Gz4FPB9jf7YLsPktw:RtoGa4Gz4FPDUzw","tlshash":"9872e791ff0432c1e93d443e609b9d9426f939ded78d690a32687229d2e31e77e1390b","first_seen":"2026-02-23T13:17:07.918274Z","last_seen":"2026-04-18T12:51:41.292969Z","times_seen":8,"resource_available":false,"data":null}},"time_used":935,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/resource/loading.css","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:51.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:22:2C:06:7C:F7:60:E2:00:D8:75:A5:16:3C:F0:6D:35:12:F6:A9","sha256":"A2:B0:3C:02:0F:09:7A:78:65:5D:9B:E6:20:FC:1A:99:B6:C6:33:AF:64:FF:07:B3:78:1D:B4:83:04:C8:B1:FF"}}},"request":{"raw":"GET /resource/loading.css HTTP/1.1\r\nHost: bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/register\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sat, 18 Apr 2026 12:45:51 GMT\r\ncontent-encoding: br\r\nlast-modified: Tue, 14 Apr 2026 14:06:41 GMT\r\nexpires: Mon, 20 Apr 2026 12:45:51 GMT\r\ncache-control: max-age=172800, public, no-transform\r\netag: W/\"69de49f1-58f\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: wietSvKMSYJdiKZmc-dl-zn1dkcHih7rjHH9gGfiuvsnkub3Gq6f5g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1423,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e1cc5d435526557acda7e1461878290f","sha1":"f3c9f5a0427d0ed822a3359b7c520dca0e3cef96","sha256":"afb4aa29c0cb6fc3849b6c62937226da23a2ee57e6913d2f8358fbe83ad7d3df","sha512":"2c684f6a041abfbab1b4e66bbf6e5ae398c5cfe9f96f522e6e6bfca367f095d7dc9838d458c79999fa5139dae01a33cef36413a09c1253a65d33896f847a2f7e","ssdeep":"","tlshash":"5321c03b09f1a44c961b861a02ec5d246b3dac439d0fdd9eb7a2740ecb82d4477d329d","first_seen":"2024-10-23T10:11:45.180877Z","last_seen":"2026-04-18T12:51:41.293791Z","times_seen":43,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T12:45:46.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 18 Apr 2026 12:45:47 GMT\r\ncontent-type: text/html;charset=utf-8\r\nlocation: index.html\r\nserver: cloudflare\r\nset-cookie: home_lang=cn; path=/\nadmin_lang=cn; path=/\nPHPSESSID=lst0icmu3l3jn4i3754l17at6o; path=/\nsite_info=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FgsVSDklZiEsbq6ahirnUWJD2mNCSzSHK%2B%2B66uqA2%2F60U2cKIWjzP7yDGIZDRHtxspUUXG2EllzSplpV7nfSw5cSrkBUL9UimojdHBdGYlzoq7fHTdw38x%2FUo1GvIZS8LA%3D\"}]}\r\ncf-ray: 9ee3c4bede9a569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11526,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T19:23:17.056279Z","times_seen":13908128,"resource_available":true,"data":null}},"time_used":913,"timings":{"blocked":53,"dns":31,"connect":1,"send":0,"wait":807,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/js/main.js","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:47.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/js/main.js HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/index.html\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-12ac\"\r\nexpires: Sun, 19 Apr 2026 00:45:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0jfMlYPIGNfy1Hw7pxSuwTafKBbC1pXPJmg4C7olNcLU0MTLUOr5t9pY1EePitmdycd6TSOwvae0%2B5ABBElTQiRN1I0TQY58%2F3oxKp7IGmNw%2Fgmpu7yWRlX1M5fwLyl0RQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4c68a1b0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4780,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"09616c12f6e4b9318049182006b37916","sha1":"9039a533295fd27d257c80a3fd0bc768dc4fdb1c","sha256":"c30dc6760d91fe68da63d49cb63cf73880f9cd8ce7cd053403217d5eddb2c13b","sha512":"793a723b49109744c3ab4ea8554d051b708e67bfaacf3c7853c5be6cb8592adaa31f21016feb17ae14c2fc6116e37abd6783f75bc6e23f5f1064038b369676aa","ssdeep":"96:EoHXuLyRoTrTY17eSLhvoz0gcmd/IlSoEm:Eo2yRR1HLhvoz0gcmd/SBr","tlshash":"a7a12045f129057891b63335cb3f5c19ac73484f99691864f6bc14ac2ff9b88a36fe18","first_seen":"2025-10-11T00:17:30.427497Z","last_seen":"2026-04-18T12:51:41.306518Z","times_seen":13,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bethash.bet/api/getConfig","fqdn":"api.bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:53.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 26 Oct 2025 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:2B:30:37:50:F6:61:76:8A:6C:6D:7A:B3:11:E8:CF:20:CD:5C:01","sha256":"C4:5A:3D:6D:5A:90:2C:4A:57:BF:0B:B6:77:9B:C1:D6:1A:C7:CD:B8:83:F8:E5:10:AF:7A:01:1E:DD:65:43:7B"}}},"request":{"raw":"OPTIONS /api/getConfig HTTP/1.1\r\nHost: api.bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: langcode,user-device\r\nReferer: https://bethash.bet/\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nserver: nginx/1.18.0 (Ubuntu)\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: true\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Sat, 18 Apr 2026 12:45:53 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN,langCode,User-Device\r\naccess-control-expose-headers: Authorization, authenticated\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: OCSt4bEqrNKL3_ZJva7kVnxP1vBwkz1DKUZPYqlklOtWV9fmb7GOfg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T19:23:17.056279Z","times_seen":13908128,"resource_available":true,"data":null}},"time_used":894,"timings":{"blocked":304,"dns":28,"connect":1,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"global.turing.captcha.gtimg.com/tgJNCap-global.c89bafa8.js","fqdn":"global.turing.captcha.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:56.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turing.captcha.gtimg.com","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BA:08:F4:14:CE:A1:19:41:5B:1B:49:47:36:ED:5D:D9:75:EB:21:B8","sha256":"1B:6A:3C:E4:2D:7F:45:5A:83:7F:AB:6F:F6:D8:95:42:54:4E:56:C7:0C:45:D1:05:D6:A0:4E:78:62:A2:88:5D"}}},"request":{"raw":"GET /tgJNCap-global.c89bafa8.js HTTP/1.1\r\nHost: global.turing.captcha.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 25 Mar 2026 07:46:54 GMT\r\nContent-Encoding: gzip\r\nEtag: \"f8b43141654524d80df081c3ed90b439\"\r\nContent-Type: application/javascript\r\nDate: Tue, 31 Mar 2026 07:15:13 GMT\r\nServer: tencent-cos\r\nx-cos-hash-crc64ecma: 85448356857139650\r\nx-cos-request-id: NjljYjc0ODFfYzZhYWYyMWRfMjcxNWRfZGY2MDMyOA==\r\nx-cos-storage-class: MAZ_STANDARD\r\nx-cosindex-replication-status: Complete\r\nContent-Length: 258923\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12977634045896917847\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":711341,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (60159), with no line terminators","md5":"434fc1a424b9e1c7fe931f240c16c080","sha1":"4bfb6cde69dabc4bf8de129f2541c95b5daf80fc","sha256":"d0b7ae0a0a87c008aa6ba0575518785fa53d24bac0661a7ae52287813877d2fa","sha512":"a5b4716d0b0bed50cb3c431e6f9f4eca5471a59e67ef8e92f9dace5cc38aec8d91baf636eba5ecdabcdc4d886756ab98b0c491d0f797245946ccbc94bcb6afde","ssdeep":"12288:skViGKDQc49wxGl1OmDttStYc3sT2xsU2qCgSMFC1wi5Kw9w5Am8FKk8JWDWiRIF:aRDQcjGlYmrTDWiRIB/","tlshash":"f9e41a407ad0a85d035b4f7b732bb1e6f85e0d6eb888488ff145bc9095e952bf9e0670","first_seen":"2026-04-01T08:03:24.041324Z","last_seen":"2026-04-18T16:43:33.855724Z","times_seen":16,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.turingfraud.net/event/report","fqdn":"www.turingfraud.net","domain":"turingfraud.net","tld":"net"},"ip":{"addr":"162.62.10.47","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:58.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turingfraud.net","organization":""},"issuer":{"commonName":"DNSPod RSA DV","organization":"DNSPod, Inc."},"validity":{"start":"Wed, 08 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:CC:09:90:24:93:4C:24:02:F1:97:00:C8:51:55:4A:C2:69:C5:FC","sha256":"0A:2F:A1:C2:DB:F8:EA:01:4E:CB:CB:BA:36:3F:00:27:43:7F:9A:66:0D:6F:EE:C5:DE:5C:E4:35:39:3B:3D:06"}}},"request":{"raw":"POST /event/report HTTP/1.1\r\nHost: www.turingfraud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/json\r\nContent-Length: 5547\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5547,"data":"{\"channel\":400058,\"platform\":4,\"events\":[{\"id\":\"EId_TId_GT_Start\",\"content\":\"{\\\"t\\\":1776516356718,\\\"ret\\\":0,\\\"msg\\\":\\\"\\\"}\"},{\"id\":\"EId_TId_GRft_Start\",\"content\":\"{\\\"t\\\":1776516356719,\\\"ret\\\":0,\\\"msg\\\":\\\"\\\",\\\"dur\\\":11}\"},{\"id\":\"EId_TId_GRft_End\",\"content\":\"{\\\"t\\\":1776516358313,\\\"ret\\\":0,\\\"msg\\\":\\\"{\\\\\\\"ftCode\\\\\\\":3,\\\\\\\"dur\\\\\\\":435},{\\\\\\\"ftCode\\\\\\\":4,\\\\\\\"dur\\\\\\\":8},{\\\\\\\"ftCode\\\\\\\":5,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000320,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":5,\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":{\\\\\\\\\\\\\\\"ret\\\\\\\\\\\\\\\":-1000319,\\\\\\\\\\\\\\\"res\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"Notification is not defined\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":0,\\\\\\\\\\\\\\\"dur\\\\\\\\\\\\\\\":0}}\\\\\\\",\\\\\\\"ftCode\\\\\\\":5,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":6,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000320,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":6,\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":{\\\\\\\\\\\\\\\"ret\\\\\\\\\\\\\\\":-1000321,\\\\\\\\\\\\\\\"res\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":6,\\\\\\\\\\\\\\\"dur\\\\\\\\\\\\\\\":0}}\\\\\\\",\\\\\\\"ftCode\\\\\\\":6,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":8,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000318,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"obtain timeout\\\\\\\",\\\\\\\"ftCode\\\\\\\":8,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":9,\\\\\\\"dur\\\\\\\":998},{\\\\\\\"ftCode\\\\\\\":10,\\\\\\\"dur\\\\\\\":356},{\\\\\\\"ftCode\\\\\\\":11,\\\\\\\"dur\\\\\\\":434},{\\\\\\\"ftCode\\\\\\\":12,\\\\\\\"dur\\\\\\\":543},{\\\\\\\"ftCode\\\\\\\":15,\\\\\\\"dur\\\\\\\":1042},{\\\\\\\"ftCode\\\\\\\":16,\\\\\\\"dur\\\\\\\":899},{\\\\\\\"ftCode\\\\\\\":1,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000320,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":1,\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":{\\\\\\\\\\\\\\\"ret\\\\\\\\\\\\\\\":-1000321,\\\\\\\\\\\\\\\"res\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":1,\\\\\\\\\\\\\\\"dur\\\\\\\\\\\\\\\":0}}\\\\\\\",\\\\\\\"ftCode\\\\\\\":1,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":17,\\\\\\\"dur\\\\\\\":856},{\\\\\\\"ftCode\\\\\\\":18,\\\\\\\"dur\\\\\\\":856},{\\\\\\\"ftCode\\\\\\\":13,\\\\\\\"dur\\\\\\\":898},{\\\\\\\"ftCode\\\\\\\":14,\\\\\\\"dur\\\\\\\":991},{\\\\\\\"ftCode\\\\\\\":2,\\\\\\\"dur\\\\\\\":1536},{\\\\\\\"ftCode\\\\\\\":3,\\\\\\\"dur\\\\\\\":435},{\\\\\\\"ftCode\\\\\\\":4,\\\\\\\"dur\\\\\\\":8},{\\\\\\\"ftCode\\\\\\\":5,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000320,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":5,\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":{\\\\\\\\\\\\\\\"ret\\\\\\\\\\\\\\\":-1000319,\\\\\\\\\\\\\\\"res\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"Notification is not defined\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":0,\\\\\\\\\\\\\\\"dur\\\\\\\\\\\\\\\":0}}\\\\\\\",\\\\\\\"ftCode\\\\\\\":5,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":6,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000320,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":6,\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":{\\\\\\\\\\\\\\\"ret\\\\\\\\\\\\\\\":-1000321,\\\\\\\\\\\\\\\"res\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":6,\\\\\\\\\\\\\\\"dur\\\\\\\\\\\\\\\":0}}\\\\\\\",\\\\\\\"ftCode\\\\\\\":6,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":8,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000318,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"obtain timeout\\\\\\\",\\\\\\\"ftCode\\\\\\\":8,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":9,\\\\\\\"dur\\\\\\\":998},{\\\\\\\"ftCode\\\\\\\":10,\\\\\\\"dur\\\\\\\":356},{\\\\\\\"ftCode\\\\\\\":11,\\\\\\\"dur\\\\\\\":434},{\\\\\\\"ftCode\\\\\\\":12,\\\\\\\"dur\\\\\\\":543},{\\\\\\\"ftCode\\\\\\\":15,\\\\\\\"dur\\\\\\\":1042},{\\\\\\\"ftCode\\\\\\\":16,\\\\\\\"dur\\\\\\\":899},{\\\\\\\"ftCode\\\\\\\":1,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000320,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":1,\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":{\\\\\\\\\\\\\\\"ret\\\\\\\\\\\\\\\":-1000321,\\\\\\\\\\\\\\\"res\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":1,\\\\\\\\\\\\\\\"dur\\\\\\\\\\\\\\\":0}}\\\\\\\",\\\\\\\"ftCode\\\\\\\":1,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":17,\\\\\\\"dur\\\\\\\":856},{\\\\\\\"ftCode\\\\\\\":18,\\\\\\\"dur\\\\\\\":856},{\\\\\\\"ftCode\\\\\\\":13,\\\\\\\"dur\\\\\\\":898},{\\\\\\\"ftCode\\\\\\\":14,\\\\\\\"dur\\\\\\\":991},{\\\\\\\"ftCode\\\\\\\":3,\\\\\\\"dur\\\\\\\":435},{\\\\\\\"ftCode\\\\\\\":4,\\\\\\\"dur\\\\\\\":8},{\\\\\\\"ftCode\\\\\\\":5,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000320,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":5,\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":{\\\\\\\\\\\\\\\"ret\\\\\\\\\\\\\\\":-1000319,\\\\\\\\\\\\\\\"res\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"Notification is not defined\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":0,\\\\\\\\\\\\\\\"dur\\\\\\\\\\\\\\\":0}}\\\\\\\",\\\\\\\"ftCode\\\\\\\":5,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":6,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000320,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":6,\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":{\\\\\\\\\\\\\\\"ret\\\\\\\\\\\\\\\":-1000321,\\\\\\\\\\\\\\\"res\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":6,\\\\\\\\\\\\\\\"dur\\\\\\\\\\\\\\\":0}}\\\\\\\",\\\\\\\"ftCode\\\\\\\":6,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":8,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000318,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"obtain timeout\\\\\\\",\\\\\\\"ftCode\\\\\\\":8,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":9,\\\\\\\"dur\\\\\\\":998},{\\\\\\\"ftCode\\\\\\\":10,\\\\\\\"dur\\\\\\\":356},{\\\\\\\"ftCode\\\\\\\":11,\\\\\\\"dur\\\\\\\":434},{\\\\\\\"ftCode\\\\\\\":12,\\\\\\\"dur\\\\\\\":543},{\\\\\\\"ftCode\\\\\\\":15,\\\\\\\"dur\\\\\\\":1042},{\\\\\\\"ftCode\\\\\\\":16,\\\\\\\"dur\\\\\\\":899},{\\\\\\\"ftCode\\\\\\\":1,\\\\\\\"err\\\\\\\":{\\\\\\\"ret\\\\\\\":-1000320,\\\\\\\"res\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"err\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":1,\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":{\\\\\\\\\\\\\\\"ret\\\\\\\\\\\\\\\":-1000321,\\\\\\\\\\\\\\\"res\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"err\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"ftCode\\\\\\\\\\\\\\\":1,\\\\\\\\\\\\\\\"dur\\\\\\\\\\\\\\\":0}}\\\\\\\",\\\\\\\"ftCode\\\\\\\":1,\\\\\\\"dur\\\\\\\":0}},{\\\\\\\"ftCode\\\\\\\":17,\\\\\\\"dur\\\\\\\":856},{\\\\\\\"ftCode\\\\\\\":18,\\\\\\\"dur\\\\\\\":856},{\\\\\\\"ftCode\\\\\\\":13,\\\\\\\"dur\\\\\\\":898},{\\\\\\\"ftCode\\\\\\\":14,\\\\\\\"dur\\\\\\\":991},{\\\\\\\"ftCode\\\\\\\":2,\\\\\\\"dur\\\\\\\":1536}\\\",\\\"dur\\\":1605}\"},{\"id\":\"EId_TId_GRisk_Start\",\"content\":\"{\\\"t\\\":1776516358346,\\\"ret\\\":0,\\\"msg\\\":\\\"\\\",\\\"dur\\\":1638}\"},{\"id\":\"EId_TId_GRisk_End\",\"content\":\"{\\\"t\\\":1776516358823,\\\"ret\\\":0,\\\"msg\\\":\\\"que:0,dns:0,tcp:0,ssl:0,req:0,res:0,ttfb:0,total:473\\\",\\\"dur\\\":2115}\"},{\"id\":\"EId_TId_GT_End\",\"content\":\"{\\\"t\\\":1776516358828,\\\"ret\\\":0,\\\"msg\\\":\\\"\\\",\\\"dur\\\":2119}\"}],\"buildno\":200500,\"uuid\":\"917874a8e3524464a294deb44a7edc09\",\"seq\":\"140c1141-c312-4945-8948-c1547dba4780\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:45:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 9\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, Traceparent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7356645231da9cfecc34610420982100","sha1":"4e6d5bf58d719360518ecccb073248d0293dd346","sha256":"2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822","sha512":"c092af8c828b98fb9ac62ec48f64c01907d25106e96096a40e52d770f732442c729c11c34406dd0be1690620d91d97a6a4839ca409b57e227a65844e17bad112","ssdeep":"","tlshash":"8c50003000000c03000c0c0000000003c0030c0030000c0000000c000000c000300000","first_seen":"2023-04-05T16:48:03Z","last_seen":"2026-04-18T12:51:41.283057Z","times_seen":1670,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/images/10.png","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:49.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/images/10.png HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/template/pc/skin/css/index.css\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-e69\"\r\nexpires: Mon, 18 May 2026 12:45:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZemXUD3TSUJULBGphBfjHbtmFFpU0BBJtJY%2BwyDwB3%2B166KBu%2FjkSeMw5CWQ4XEhdDUXY%2FYDAJvUL4ze4AzifK1PhG1lWD6MUi3%2FoRID7OoYX6U1RkxQr1Z1isiC%2F%2BjQkTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4ce4a720b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 37, 8-bit/color RGBA, non-interlaced","md5":"2a0fca7b4c8f5d7d9b73c6ebc9b4e479","sha1":"d250341833fb06dd800904a16dc2502b42cbdea4","sha256":"ddbf7fa13c560eee5cb5779e69d6092cde19cadbe5ce2c771cbedade34a29f82","sha512":"39f1fa39664e6674fd2f0e4ec40ec2e3c57e73d56fec4bc4279ea1825636c84613318101d003c910bb0f8a58e19537c49c9afdc4b23a89dc15afa652d9cedcb7","ssdeep":"","tlshash":"18718dc94981c116140d26b935ebee0a4939ab94a2590f14fefdc34fd920c713d36b92","first_seen":"2025-08-14T04:55:24.297244Z","last_seen":"2026-04-18T12:51:41.315124Z","times_seen":13,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"77hash.s3.ap-northeast-3.amazonaws.com/hashpromo.js","fqdn":"77hash.s3.ap-northeast-3.amazonaws.com","domain":"77hash.s3.ap-northeast-3.amazonaws.com","tld":"s3.ap-northeast-3.amazonaws.com"},"ip":{"addr":"3.5.241.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:51.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-northeast-3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 14 Feb 2026 00:00:00 GMT","end":"Thu, 11 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8E:7B:63:EF:E6:C9:5C:E2:75:EC:28:1B:89:0A:7B:5A:75:7F:58:D8","sha256":"2F:C4:88:1B:AD:C8:3A:F2:3A:5E:75:3A:97:20:2B:B4:E1:CF:A3:62:48:15:B5:56:53:F5:84:C3:DD:53:FB:E5"}}},"request":{"raw":"GET /hashpromo.js HTTP/1.1\r\nHost: 77hash.s3.ap-northeast-3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: gqx0smF1xUT2uSlE5dZIus41UZuLZadEWA6jWJoXdmK5anVK6CAomVZe5gzgL+3RBypUiq3oI1LcFU+jUGDTHbmnXcfver30\r\nx-amz-request-id: 4RHKYGNQBCZBJVXM\r\nDate: Sat, 18 Apr 2026 12:45:53 GMT\r\nLast-Modified: Tue, 19 Aug 2025 01:01:42 GMT\r\nETag: \"651fef4b8d3c09c66a018e7992ffde28\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: application/javascript\r\nContent-Length: 1195\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1195,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (317), with CRLF line terminators","md5":"651fef4b8d3c09c66a018e7992ffde28","sha1":"f7f945dfdbfdd068f5718f2b30b9a5bc284922ca","sha256":"89cdcc8fd721bedabc8d24c13aa1600a1082327c0afb92b28772da0ddc13e5d2","sha512":"fdbfca8ed676d6fad0a00e21413fb4c1f21e19edb78d38493412f075ec1d3be3bf82c42a3f0b4dbb2dcf1170fe241eacbc3a35dbf18aa8cd47a767505cc7a896","ssdeep":"","tlshash":"0d214567e865c12f32fcaaf353a1b1293121e314e31dc7163e4f60a723524d64335438","first_seen":"2025-08-21T18:39:39.064186Z","last_seen":"2026-04-18T12:51:41.278394Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1779,"timings":{"blocked":732,"dns":21,"connect":289,"send":0,"wait":310,"receive":0,"ssl":424},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/css/public.css","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:47.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/css/public.css HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/index.html\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-d9c\"\r\nexpires: Sun, 19 Apr 2026 00:45:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXG4hDmcFEJ%2Br%2BjAXue2A9aSEbeic0gEqAQbnxZSRX%2Fe%2BnGor5KWPRgMuDEq45%2BYsgxGZQu%2Fps8qOjNE0P0ozMbN98TnrPzc2EROKkETCrmvQKgFLeiJpeHte11jw7kPECI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4c67a190b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3484,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7ac434dd3e97b917cd31012ecf566682","sha1":"7e0a3ceb090b7ec7f52c26d73cb9880e49c26b3b","sha256":"64993db5014254d5202f10cfc782d5e4081eb310495f2244055cda8d8f58ea69","sha512":"af7d6dff82432c201e82b22d252112beccb245f90345a116de46ce5c85466854ffb79dcf556ef4dfaf17b4a72a8958830979c3bb3c6514faaab03696002d48ee","ssdeep":"","tlshash":"8e71219c676871cfa203eba9b7b15b389f5d40a46f0f412df5f4bb21a18a0142a735d1","first_seen":"2025-08-14T04:55:24.35237Z","last_seen":"2026-04-18T12:51:41.31041Z","times_seen":16,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?634aa988db89be73b42c18706aa8a1c0","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:49.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?634aa988db89be73b42c18706aa8a1c0 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nDate: Sat, 18 Apr 2026 12:45:50 GMT\r\nServer: apache\r\nStrict-Transport-Security: max-age=172800\r\nContent-Type: text/plain; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T19:23:17.056279Z","times_seen":13908128,"resource_available":true,"data":null}},"time_used":2162,"timings":{"blocked":934,"dns":1,"connect":476,"send":0,"wait":292,"receive":0,"ssl":457},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/images/2.png","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:49.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/images/2.png HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/template/pc/skin/css/public.css\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-d90\"\r\nexpires: Mon, 18 May 2026 12:45:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lv0D6GgzGieNbcpT34gMdhOSXObfzisRklznwTqC6xv2XXrlvXCve8riepN6gPx07XX0WY2HUHMHBq0P7wbvZrVXY5jKwikKArHNuAsN6g99CoK1h2PN2Wy4gRZC85GFVhs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4ce3a6d0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 31 x 31, 8-bit/color RGBA, non-interlaced","md5":"909c8d67ac8461d57f907b14c4a8716e","sha1":"cbaa100aceb359abbe60766091e35f078b9c3f9c","sha256":"725253c3799143a072e1861c95b34c9bc965907646fcb6ff1250a2565a12f142","sha512":"bac381409af6189b318fdcd652e820abf67e0c9b0dc582a9c1198c642b6f7043a51d67bba42db8f6fba4d6a8a4dca2d761a19e908673d1df319f1d1d785e572c","ssdeep":"","tlshash":"21615dc5a8410126144606da257fec074916ebc0935a7e5ceafe938f8610e923cb5bae","first_seen":"2025-08-14T04:55:24.292101Z","last_seen":"2026-04-18T12:51:41.289312Z","times_seen":16,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/assets/main.ecaab409.js","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:51.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:22:2C:06:7C:F7:60:E2:00:D8:75:A5:16:3C:F0:6D:35:12:F6:A9","sha256":"A2:B0:3C:02:0F:09:7A:78:65:5D:9B:E6:20:FC:1A:99:B6:C6:33:AF:64:FF:07:B3:78:1D:B4:83:04:C8:B1:FF"}}},"request":{"raw":"GET /assets/main.ecaab409.js HTTP/1.1\r\nHost: bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/register\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sat, 18 Apr 2026 12:45:51 GMT\r\ncontent-encoding: br\r\nlast-modified: Tue, 14 Apr 2026 14:06:41 GMT\r\nexpires: Mon, 20 Apr 2026 12:45:51 GMT\r\ncache-control: max-age=172800, public, no-transform\r\netag: W/\"69de49f1-18c141\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: x7ByJnofZNjbWTxce-J8kavV-uOhLwikVAIpe2RGs5D2pPwaD2IvMw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1622337,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"775a4622ab55db05a5a6d63c71c24e6d","sha1":"e33cbdb0509a729a632477665cf131ea5a7c7786","sha256":"d058ecace9257f5ee4d222393d9a13088cc5954cc306116e584c09251484a28d","sha512":"ff1b6351eff5b5210161d1eca6251de30b4ebb9da86ba3752a9b13812c1a40fe361a2696718ea0d75ac9fc66c0925f9ff058e0f62fef07379b72fddd5ebcba1a","ssdeep":"24576:dV6cDTV090IdumcYuCoj4Cb2VJGpzyIdwWGeHy+:dV6cDTV090IdumcYuCoj437GpzyQwWGk","tlshash":"4125d8d8b1cb999103d689c45ca722d1b12c1e463488e6e7f878ad7afcd11b58673f38","first_seen":"2026-04-17T00:42:36.054269Z","last_seen":"2026-04-18T12:51:41.315713Z","times_seen":8,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.turingfraud.net/event/report","fqdn":"www.turingfraud.net","domain":"turingfraud.net","tld":"net"},"ip":{"addr":"162.62.10.47","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:58.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turingfraud.net","organization":""},"issuer":{"commonName":"DNSPod RSA DV","organization":"DNSPod, Inc."},"validity":{"start":"Wed, 08 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:CC:09:90:24:93:4C:24:02:F1:97:00:C8:51:55:4A:C2:69:C5:FC","sha256":"0A:2F:A1:C2:DB:F8:EA:01:4E:CB:CB:BA:36:3F:00:27:43:7F:9A:66:0D:6F:EE:C5:DE:5C:E4:35:39:3B:3D:06"}}},"request":{"raw":"OPTIONS /event/report HTTP/1.1\r\nHost: www.turingfraud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bethash.bet/\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:45:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 9\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, Traceparent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7356645231da9cfecc34610420982100","sha1":"4e6d5bf58d719360518ecccb073248d0293dd346","sha256":"2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822","sha512":"c092af8c828b98fb9ac62ec48f64c01907d25106e96096a40e52d770f732442c729c11c34406dd0be1690620d91d97a6a4839ca409b57e227a65844e17bad112","ssdeep":"","tlshash":"8c50003000000c03000c0c0000000003c0030c0030000c0000000c000000c000300000","first_seen":"2023-04-05T16:48:03Z","last_seen":"2026-04-18T12:51:41.283057Z","times_seen":1670,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ca.turing.captcha.qcloud.com/TJNCaptcha-global.js","fqdn":"ca.turing.captcha.qcloud.com","domain":"qcloud.com","tld":"com"},"ip":{"addr":"43.158.119.130","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:55.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turing.captcha.qcloud.com","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 15 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"97:D5:C4:59:CC:DB:39:C1:09:48:A2:5C:F1:CA:F9:65:FD:86:E4:8F","sha256":"A6:65:54:11:17:3C:C3:1A:6F:AA:C1:D8:E6:1D:0F:59:2D:E8:DF:E7:8F:D2:BB:F9:40:83:5D:1E:01:65:D9:30"}}},"request":{"raw":"GET /TJNCaptcha-global.js HTTP/1.1\r\nHost: ca.turing.captcha.qcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 18 Apr 2026 12:45:55 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=CAO PSA OUR\r\nServer: Trpc httpd, tencent http server\r\nCache-Control: max-age=600\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":903500,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62551), with no line terminators","md5":"4f54a9725d467aa5b83da934abe6898c","sha1":"7a22abada5e5bbb0a73ee548ccf8cf0544bafa14","sha256":"71e6fd2d67cddb60983bca18452d0cc29513ebb31c7e6bdb9cdf48073b8d627e","sha512":"04dcefb913958bc4e2f134695e1c0ed43c5aba28c1e6c223fc6df9727a5edbf03a8e9bbe5fbae25881044b531209027e4f40b77b27c600a3e7c01891d27a8b53","ssdeep":"12288:wKkkZEAi1UFtNgKsuPEX77Ng6RXvWbiqQFb6tDITMzvs60jr0lUirMcDkwqBwmho:xPEoFtNgVuPEr5qR0fwMHvpkv9ossWCq","tlshash":"2c15b84077c07849539b8f3bb32bb5f6f81a0c6a3d98448bd600fc5466e6627fae5931","first_seen":"2026-04-01T08:03:24.05058Z","last_seen":"2026-04-18T16:43:33.867561Z","times_seen":16,"resource_available":true,"data":null}},"time_used":1143,"timings":{"blocked":511,"dns":0,"connect":20,"send":0,"wait":23,"receive":94,"ssl":493},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"global.turing.captcha.gtimg.com/tgJNCapCss-global.8449b280.css","fqdn":"global.turing.captcha.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:55.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.turing.captcha.gtimg.com","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BA:08:F4:14:CE:A1:19:41:5B:1B:49:47:36:ED:5D:D9:75:EB:21:B8","sha256":"1B:6A:3C:E4:2D:7F:45:5A:83:7F:AB:6F:F6:D8:95:42:54:4E:56:C7:0C:45:D1:05:D6:A0:4E:78:62:A2:88:5D"}}},"request":{"raw":"GET /tgJNCapCss-global.8449b280.css HTTP/1.1\r\nHost: global.turing.captcha.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 20 Jan 2026 10:53:36 GMT\r\nContent-Encoding: gzip\r\nEtag: \"8449b280e4269aa9b92fe9b07182ae9b\"\r\nContent-Type: text/css\r\nDate: Fri, 23 Jan 2026 01:52:58 GMT\r\nServer: tencent-cos\r\nx-cos-hash-crc64ecma: 7979581459429129190\r\nx-cos-request-id: Njk3MmQ0N2FfOWYwZTc5MWVfYWI3M18xNzlhN2Nk\r\nx-cos-storage-class: MAZ_STANDARD\r\nx-cosindex-replication-status: Complete\r\nContent-Length: 6391\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16295127219858776550\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61637,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (61637), with no line terminators","md5":"8449b280e4269aa9b92fe9b07182ae9b","sha1":"661fbab09bb12ffd4368fd9599cfaf179fc5d03f","sha256":"9fbcf619d9a779a1e59d276134b58ff5e9b6bdc81141d84237379542f9c46eda","sha512":"0c0e0ee796b4f6fc2428084543c481fc9347059df514bc5d353e2919513e9c1d4b2e6b1b6b460cdb7095b39b44a5158895bd3748626b155fe0a0313292699987","ssdeep":"384:C6s6YwiLaghl/CjqHPj369U8Dkhg9x7zZuvVZAhu3lUVjZGZpWRb:C6s6bi2G0Nuvkhwlwj4ZQl","tlshash":"de53f2f2002c1e06daf2c417868f9696d034c353f12a81dbb5d3d21587ab9f7b9d19ae","first_seen":"2026-01-26T11:46:07.107684Z","last_seen":"2026-04-18T16:43:33.880749Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1194,"timings":{"blocked":580,"dns":1,"connect":21,"send":0,"wait":22,"receive":12,"ssl":556},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/images/bg.jpg","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:49.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/images/bg.jpg HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/template/pc/skin/css/public.css\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-4bd\"\r\nexpires: Mon, 18 May 2026 12:45:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IM8%2FBGdgi%2F3l9SguSwnh9LMEKhBKP5VvSKrMZjkpBdRJSQqIvr1LF59C4A5SgK1PNfeN79VVd2sDkM0jKBv0UuXT8l3TKF%2BnP5%2B24FV%2FI04Z%2Br542LY8TZdAFtyq5y5nij8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4ce0a6b0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1213,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 8x7, components 3","md5":"fad5a0c088275a0d4f19cb7cf3fc292a","sha1":"e8c6d58cf696b3ad14e70dfc956891c80b9305e1","sha256":"fcddc724fbdc56836a13970f21b3ef13553dc66dfe0fc94a928f9f8864ead0b8","sha512":"e7b7f089381ddc84cc2d5ea247878d77bf67e7b896ab8188fa25f529bb8a09da6981d43e69935fc21629443172af6f125358e7987da7586600049398d5e1c923","ssdeep":"","tlshash":"4721000eb653ab07e4dce83534f3d1264a010880ebc1a94aa8fee846a8311f5085d5ca","first_seen":"2025-08-14T04:55:24.364519Z","last_seen":"2026-04-18T12:51:41.284655Z","times_seen":16,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/assets/loading.b8c8cec7.gif","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:54.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:22:2C:06:7C:F7:60:E2:00:D8:75:A5:16:3C:F0:6D:35:12:F6:A9","sha256":"A2:B0:3C:02:0F:09:7A:78:65:5D:9B:E6:20:FC:1A:99:B6:C6:33:AF:64:FF:07:B3:78:1D:B4:83:04:C8:B1:FF"}}},"request":{"raw":"GET /assets/loading.b8c8cec7.gif HTTP/1.1\r\nHost: bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/register\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 274364\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sat, 18 Apr 2026 12:45:55 GMT\r\nlast-modified: Tue, 14 Apr 2026 14:06:41 GMT\r\naccept-ranges: bytes\r\nexpires: Mon, 20 Apr 2026 12:45:55 GMT\r\ncache-control: max-age=172800, public, no-transform\r\netag: \"69de49f1-42fbc\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: kxtrShJUzMavlUGnkXW9ECi-zDlzFZ9EO-vTy73KcqMY1iaP6n4juA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":274364,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 353 x 370","md5":"8d744031c2bfe2012884005c5c4b7360","sha1":"93f681b4d3c1f32a64f74215c110ceb06c23f165","sha256":"b8c8cec7becdadf09e1112be6962c55d57cb1b5bd61e68e3e60c0a925f00615f","sha512":"5e2e2d2195e432ba2403b83c5c1e6d52e34887fc5d6b9d79bc69adccd09b4b9fe60dd60d5dee9c250c20da30a6fbf1e245257997b624d3596fcb34e15d3b19b3","ssdeep":"6144:GvsVFdYaDyl+ikVjnIZJNhS6kNnYut3yobI4NsyxhEr:GU7/ylvkVjIZJ7SeutiokIREr","tlshash":"b94412d74f5a4ffec8371126606a53db2ca71e80bcf3e1b41b52e69445b2928a04f5f1","first_seen":"2025-05-28T04:51:10.47814Z","last_seen":"2026-04-18T12:51:41.305042Z","times_seen":41,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":698,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bethash.bet/assets/loginbg.f742cff4.png","fqdn":"bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:54.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:22:2C:06:7C:F7:60:E2:00:D8:75:A5:16:3C:F0:6D:35:12:F6:A9","sha256":"A2:B0:3C:02:0F:09:7A:78:65:5D:9B:E6:20:FC:1A:99:B6:C6:33:AF:64:FF:07:B3:78:1D:B4:83:04:C8:B1:FF"}}},"request":{"raw":"GET /assets/loginbg.f742cff4.png HTTP/1.1\r\nHost: bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/assets/login.8d1f7ec0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 601961\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sat, 18 Apr 2026 12:45:55 GMT\r\nlast-modified: Tue, 14 Apr 2026 14:06:41 GMT\r\naccept-ranges: bytes\r\nexpires: Mon, 20 Apr 2026 12:45:55 GMT\r\ncache-control: max-age=172800, public, no-transform\r\netag: \"69de49f1-92f69\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: m7II6Po0KVdT8hzU9p5zVYSgtIan3TJvpYWRg3HIfH6V1huyGvKhmA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":601961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"101675f5323c83583aff47556a97ded7","sha1":"1ebc33652abd7dfa8a3a0abdfc09afe8729972ff","sha256":"f742cff408ac37fc77fcda6ce8fa4456d246c22f13a3ac389edb7e3602cea2c1","sha512":"a3e8746a879679f546b46864f1bb10dfe14c5a45adace36f24988691207592d9082b90b4199baafc8008e25735b2a0716bc249848ae930a1d8292fd988d61ae4","ssdeep":"12288:nSR2+HFgy8vHrf6MWQSQJpTuIhZbaY8zmbisk2+/4gud9TxO18uw+vil8kx:SRFJoryoJNu8bKmbisA/WT285+vilZ","tlshash":"fdd423294d67e22bc4b4a96990388c9d404798a570c3fb5ee3fc41752cebbf7109bd06","first_seen":"2025-07-02T18:11:26.557947Z","last_seen":"2026-04-18T12:51:41.294472Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1443,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":1182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bethash.bet/api/getConfig","fqdn":"api.bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:55.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 26 Oct 2025 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:2B:30:37:50:F6:61:76:8A:6C:6D:7A:B3:11:E8:CF:20:CD:5C:01","sha256":"C4:5A:3D:6D:5A:90:2C:4A:57:BF:0B:B6:77:9B:C1:D6:1A:C7:CD:B8:83:F8:E5:10:AF:7A:01:1E:DD:65:43:7B"}}},"request":{"raw":"GET /api/getConfig HTTP/1.1\r\nHost: api.bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nlangCode: en\r\nuser-device: 2\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nserver: nginx/1.18.0 (Ubuntu)\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, private\r\ndate: Sat, 18 Apr 2026 12:45:54 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN,langCode,User-Device\r\naccess-control-expose-headers: Authorization, authenticated\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Z5OJSOQW7Ij7JcheLjQ7Tw-Pmy7RyegMlg6LYShF2KB_ZBLpVL_0oA==\r\nage: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":29414,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7b6a443dc05b25c555c97176309397d4","sha1":"7246b295b1a913729f199c91dbaa1a819885d945","sha256":"91fac140307cc157d0f90a1085673ac12f60fc66c3eec8d1cfcd41cfc6eb1ac6","sha512":"a31ecf19877ff1fee9b9666d6ffc9a1d6c44bdaa397090a64c3b125fa885b2e7b9ed084cdddd73cb6bf220910ef6e579f0dc0eb2ac035398ec617613a9f2d7b5","ssdeep":"384:bS6GbOAGS616ttXj/pGEI4ttXjJGpswTLwejI2WwbY:bS8SttXjB64tXj3ejIfw0","tlshash":"06d263bef7fc68a145f141c00d97765b16da31086fca4ca896fbce5c43885a41b2f29b","first_seen":"2026-04-18T12:46:26.95481Z","last_seen":"2026-04-18T12:48:06.575094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/images/18.png","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:49.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/images/18.png HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/template/pc/skin/css/index.css\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-b3b\"\r\nexpires: Mon, 18 May 2026 12:45:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwmY7VjwCcPLbO90hs%2BvUutTxyJjWv%2FRaGC%2F6YfqO9PTsCokvB2v%2BxEZee4y5Peitf6%2B%2FyNndK5c3599DUnwPiExViPExQkdednolI6b1l1gH03JMVmRJMeCRn8SMdeBqYs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4ce4a740b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2875,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 8, 8-bit/color RGBA, non-interlaced","md5":"3d5a28cb8bac81f2111fefce2b7e3ff2","sha1":"bfebb73cfbb25feeb2bd9cb82fa803611763c3ca","sha256":"09da36c63fe6599283af7e680315a74425c5d595b4a81e4703a31330b96bc31e","sha512":"3c8ece9cf2ed60aa670afdc5375ee26a5c2122623d4aed28e084c0e5f51661ed46ff701a98d0ae898a165fdd5ba6aa895c5ec7dd418ecb16a179d2c9ce85451b","ssdeep":"","tlshash":"0e516d899844481e104907bb366bde064927e79053581e0c9efe834fc630c517d35b5b","first_seen":"2025-08-14T04:55:24.268242Z","last_seen":"2026-04-18T12:51:41.287307Z","times_seen":13,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/images/12.png","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:49.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/images/12.png HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/template/pc/skin/css/index.css\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-e62\"\r\nexpires: Mon, 18 May 2026 12:45:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=slHb%2BufSbgbnHbIC478mPuL1GjntN0yDa2mghpgXyOCbzLwS4z0llxfiu%2Bp5vhtiFToWz1FL9djE2ikx14%2FCWp%2FyIdOlYrxWfQhVWKpcnPrUKZkGQguLU4ayCJDnkVAxTK4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4ce4a730b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3682,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 47 x 37, 8-bit/color RGBA, non-interlaced","md5":"0ed0cbe7e97083ae18662669ed290094","sha1":"f2232ad563543d759e6ed5715b953dcf441562cb","sha256":"2d32d60196dceb8022524f1d60bf91af5cec4fb59692eea458f6fe0dd0cd8b12","sha512":"33dab0aa08638068f0e729e00094798b39b6209188a4412cf68fb7d124b0e6e0b6791d3209931567fb656eb7ae330ca7997202c1c3da9e99881bd0adec38ccc5","ssdeep":"","tlshash":"8c715f899854496a100a0bf9247bde45473fabd4539d1e1c9ebfc20fca20d523c7579e","first_seen":"2025-08-14T04:55:24.33076Z","last_seen":"2026-04-18T12:51:41.285168Z","times_seen":13,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/js/jquery.flexslider-min.js","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:47.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/js/jquery.flexslider-min.js HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/index.html\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-53a6\"\r\nexpires: Sun, 19 Apr 2026 00:45:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVp8DX2p6VM6g2GhqI%2FpTmuFadXj2QhcBma0f3YcLjxjjR1gIQYqMlqlA1T6oIz6Uo2N6zfX3JTruZ9yTCO%2Big7tFFtShLxmhC5wdaHUS9ZHZBCnEUPQDTEj3hFj%2FPPhfiE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4c68a1c0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21414,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21315), with CRLF line terminators","md5":"2b22ba873303e38db52d334001c9c35f","sha1":"659986c36a7f19a2662ed3c5a000e1de11e36923","sha256":"0e5d72c20e148edca04967ab4bff432f44264779dc5ecd81bd710eb487fdd145","sha512":"689a77a8e0165a1c08b71697ee5392e1a1fb796a55076de052ab8c052df9faf48b6c57ecc4035e5da71bc3985ad8fb1344954a5c8d1957375d76d236e508288b","ssdeep":"384:6mE4TjopcnfxNiYK0E8g8MXromIsnBscyVTnmhrpb0SXEk98Ve6:Rr86npNx3sro5sjG+tbjUJVh","tlshash":"2da28324f2503972cfe722ae7e0fd40669b3d441e816c83d3a3d574a2d641859b33eea","first_seen":"2023-03-07T13:50:43Z","last_seen":"2026-04-18T12:51:41.28832Z","times_seen":399,"resource_available":true,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dogecoinkan.com/template/pc/skin/images/5.png","fqdn":"dogecoinkan.com","domain":"dogecoinkan.com","tld":"com"},"ip":{"addr":"172.67.216.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dogecoinkan.com/index.html","date":"2026-04-18T12:45:49.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogecoinkan.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:57:02 GMT","end":"Sat, 30 May 2026 15:57:01 GMT"},"fingerprint":{"sha1":"5C:C7:08:0C:86:CB:A1:50:8E:EB:B5:97:62:5F:1D:0E:E5:5D:F4:C8","sha256":"6E:88:53:15:D9:33:AA:4F:15:56:33:5B:44:9C:A9:0F:26:73:EC:35:9C:B9:0A:FB:76:78:3D:50:26:5A:AB:89"}}},"request":{"raw":"GET /template/pc/skin/images/5.png HTTP/1.1\r\nHost: dogecoinkan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dogecoinkan.com/template/pc/skin/css/public.css\r\nCookie: home_lang=cn; admin_lang=cn; PHPSESSID=lst0icmu3l3jn4i3754l17at6o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 12:45:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Oct 2018 02:06:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bd3c82a-d33\"\r\nexpires: Mon, 18 May 2026 12:45:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8zWUOk4m7F0uW9Cj%2F0d%2Bkrg2XVOM4jlPD0pz%2BaSZ5dWfsJZRJ6PKXQGtGd%2FgZgWnL4%2FQoSZZhaKeBEj8AXdQuDnPJmx5pdMAV72IcHt6ZsMJUivcHRJjDjZw%2FwubMMQC4A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee3c4ce3a6f0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 31 x 31, 8-bit/color RGBA, non-interlaced","md5":"eca0d56fcd6e7b76a6fabcadeb0df9f1","sha1":"05aa1623ed8aae0ce7d8f160e8cdbfc8aa9e4e2d","sha256":"fc69aefaf80d2e2ac1c0822ba57b4264f60062438d9171f96c117ce3dda75b34","sha512":"70a255aa39ba9b0c59f109b7743412097b376d34a404029723df495b975d81e1619de5880b4e53b4dea8329c7eeeabd1ebcb3a357dc2e0953237b0879e5971c9","ssdeep":"","tlshash":"f3615e48a0614856100e4bf936fbed078e13d7d8936d1e0c9dfd420f9521d517c74f6a","first_seen":"2025-08-14T04:55:24.361064Z","last_seen":"2026-04-18T12:51:41.28198Z","times_seen":16,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"dogecoinkan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bethash.bet/api/getConfig","fqdn":"api.bethash.bet","domain":"bethash.bet","tld":"bet"},"ip":{"addr":"52.84.50.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bethash.bet/register","date":"2026-04-18T12:45:55.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bethash.bet","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 26 Oct 2025 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:2B:30:37:50:F6:61:76:8A:6C:6D:7A:B3:11:E8:CF:20:CD:5C:01","sha256":"C4:5A:3D:6D:5A:90:2C:4A:57:BF:0B:B6:77:9B:C1:D6:1A:C7:CD:B8:83:F8:E5:10:AF:7A:01:1E:DD:65:43:7B"}}},"request":{"raw":"GET /api/getConfig HTTP/1.1\r\nHost: api.bethash.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nlangCode: en\r\nuser-device: 2\r\nOrigin: https://bethash.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bethash.bet/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nserver: nginx/1.18.0 (Ubuntu)\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, private\r\ndate: Sat, 18 Apr 2026 12:45:54 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN,langCode,User-Device\r\naccess-control-expose-headers: Authorization, authenticated\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: WLkX-3pH1vCQLMslLEGEaUg9_X6PtktGr9qPcjok_lC-s_uKT4BFEg==\r\nage: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":29414,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7b6a443dc05b25c555c97176309397d4","sha1":"7246b295b1a913729f199c91dbaa1a819885d945","sha256":"91fac140307cc157d0f90a1085673ac12f60fc66c3eec8d1cfcd41cfc6eb1ac6","sha512":"a31ecf19877ff1fee9b9666d6ffc9a1d6c44bdaa397090a64c3b125fa885b2e7b9ed084cdddd73cb6bf220910ef6e579f0dc0eb2ac035398ec617613a9f2d7b5","ssdeep":"384:bS6GbOAGS616ttXj/pGEI4ttXjJGpswTLwejI2WwbY:bS8SttXjB64tXj3ejIfw0","tlshash":"06d263bef7fc68a145f141c00d97765b16da31086fca4ca896fbce5c43885a41b2f29b","first_seen":"2026-04-18T12:46:26.95481Z","last_seen":"2026-04-18T12:48:06.575094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"api.bethash.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}