{"report_id":"1ec1f5ec-5ff5-46e7-89a7-459e568481ed","version":6,"status":"done","tags":[],"date":"2026-02-25T18:41:49Z","url":{"schema":"http","addr":"saltuspro.com","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"title":"SaltusPro","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"saltuspro.com","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T18:41:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41648,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.466773+0000\",\"flow_id\":729271527545960,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41648,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:28.924776+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41644,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.470706+0000\",\"flow_id\":2241896732171130,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41644,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:28.924538+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41630,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.471869+0000\",\"flow_id\":1971771206539804,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41630,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-02-25T18:41:28.924188+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41666,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.476675+0000\",\"flow_id\":1688062846836600,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41666,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:28.925560+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41654,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.477505+0000\",\"flow_id\":1687339144846936,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41654,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:28.925272+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41650,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.496654+0000\",\"flow_id\":251357631618406,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41650,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:28.925030+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41702,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.712637+0000\",\"flow_id\":2216079683856403,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41702,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:29.174099+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41698,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.716678+0000\",\"flow_id\":1890138910730152,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41698,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:29.173992+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41682,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.719616+0000\",\"flow_id\":336994984633962,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41682,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:29.173674+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41718,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.725097+0000\",\"flow_id\":2008138842220780,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41718,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:29.174316+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41712,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.776797+0000\",\"flow_id\":581754433415290,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41712,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:29.174202+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:29Z","timestamp":1772044889,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41688,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:29.784223+0000\",\"flow_id\":1076210395883315,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":41688,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:29.173875+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-10-12T15:33:58.168765Z","last_seen":"2026-02-24T15:48:10.384371Z","alert_count":0,"request_count":18,"received_data":448790,"sent_data":8733,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"h5-api.saltuspro.com","ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-02-25T17:59:14.324325Z","last_seen":"2026-02-25T17:59:14.324325Z","alert_count":49,"request_count":49,"received_data":916139,"sent_data":25328,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"saltuspro.com","ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-02-25T17:59:14.326966Z","last_seen":"2026-02-25T17:59:14.326966Z","alert_count":21,"request_count":21,"received_data":6998490,"sent_data":10288,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hw.rangwodf.cc","ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-12","domain_rank":0,"first_seen":"2025-06-03T12:45:54.191815Z","last_seen":"2026-02-19T15:44:14.989928Z","alert_count":0,"request_count":1,"received_data":5022,"sent_data":372,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"storage.googleapis.com","ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":880,"first_seen":"2012-08-06T06:33:30Z","last_seen":"2026-02-23T03:22:40.289374Z","alert_count":0,"request_count":15,"received_data":130494,"sent_data":7192,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"saltuspro.com/charting_library/charting_library.min.js","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-07T23:37:29.554045Z","times_seen":519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ee25df141b731e0db791e93312275f46","sha1":"c7de81b170dd04f2ec1244ea637bd67689a2e383","sha256":"ae4221e15a03cc0a37a1367e77b5065b2e6982a21f9bcd3c4daa1338db1695fd","sha512":"e42f5cec4374f848e64dbbc39d7fd67f02f214e3b9b3a8015f48d537257f6282c1b65422bd779b3d779f03192280698a84a5a93c9c4cc3fc5d7c3de3e2cf9a04","ssdeep":"","tlshash":"bec08cc4a0e23d002606641020af34e49024402670481b028cd4d8492e230b0823be98","size":140,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-06-08T12:43:52.034271Z","times_seen":3947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-08T16:32:21.017519Z","times_seen":1329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-06-08T12:43:52.033748Z","times_seen":1013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-06-08T12:43:52.020895Z","times_seen":896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbd2e722dc1c0e1ea48e6c30d63a3790","sha1":"277ea5cfb982bed2c1bd6e2e2ced098e71b8f276","sha256":"f0e792b00d24ee1d4d3dac97ca15accd08913962dac8588e58fedb8a1e823068","sha512":"3224b7e24005f843e0272127b5cef398d9690e8776276f992df717334a76562e29b9fad832ed23abf67984de561382b0172c2eccbf2fe6e77f83120a0b7fbe64","ssdeep":"","tlshash":"7511c2fe191ab02d6303405f976b7511643150a9001a544177ccdf9dab9af6dd0cfb8d","size":1054,"data":"","first_seen":"2026-02-25T17:59:20.238122Z","last_seen":"2026-02-25T18:42:10.681442Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4960895c746dfa908d21cbacd8b21bb8","sha1":"86c808fea849e1915b206c8ec1f952144d1a53e8","sha256":"9c6f9052795b24b7a44e4b46615fb3b664011c2b44c38aae55380368ea8117fd","sha512":"7eda14f6770aef2c9e9977abdfdeab0d5404d9cb6c091c8e9612b20acf542d3205ccb20b876be4f6d7702b15144e438352d6418253bb9e163b4d0873446b0b99","ssdeep":"","tlshash":"63c08cc5a0c22d209a26691010af24e89034402670485f528c98e8493e224f08233eac","size":148,"data":"","first_seen":"2025-03-06T08:06:41.486911Z","last_seen":"2026-05-18T14:20:36.342137Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ca2c8a513ba4ddd84c4c4857faf9f8b6","sha1":"29c6e6c68ff201ae5b1df93335a1170398f20b2c","sha256":"4466292d90055a17bde39e5aa47cf9fb23a76ce5d88f990de0cb7983d451a0df","sha512":"e886ba9c1a87b369d2ccd457d266da56dab3237f1446981dca3c9fda74e822dde664b62d3272bbe59b1e04b5ab7c49fd34668ad0e99528ef6850c3def75f668e","ssdeep":"","tlshash":"33c08cc4a0c27e509622641820bf28e89038402674485f529d98e84a3e760b08233eac","size":147,"data":"","first_seen":"2023-12-04T02:29:51Z","last_seen":"2026-05-29T12:32:32.194132Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e3141b6741f85896e470f695de39554","sha1":"802b71c88e22a081673f7907b6a5859a06ad63a2","sha256":"1ba974e2b96fc98550eb2211073f493e17675b0e2611fa2b41774a5308118842","sha512":"c03196e5663f2a0268d574bf8fcb53aa187ee43f0122e8bcd22c4eae2835e1a531cf8df6df17dccb20bfe9ab51021ca4cf70e1136de63749bcf9fd8c7f9e9558","ssdeep":"","tlshash":"1ac08cc4a0d77d201612a42020bf24e89024406670481b57eda8dc483e620b48237e98","size":147,"data":"","first_seen":"2024-08-29T17:49:52.039904Z","last_seen":"2026-06-01T14:38:39.533455Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e29cc4b739166fb0de3dd3960891cf94","sha1":"32bf92595a210346b3fa579ce87df4987f109d95","sha256":"d3b8857aaf83eedf7762ae5079cebc09d4924e13766d06fd68dbb746634f95e3","sha512":"854eba232753dfc9183d3029c72a8ec545156e6a966cbf69fbad7acd252632ee09b17f9666f3edfb4541f58d3d3bbfc9841f999c37cac48586997700b245e0af","ssdeep":"","tlshash":"7bc08cc4a0c26d102602651021bf38e490248027b0481b038c94d8482e630b08237ea8","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-08T16:51:31.609674Z","times_seen":3212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8d57e04f1270378191cc5f46c4f3d0f8","sha1":"011e10d0c77d6b42b4c0b1a7b98982d6d32b6e9e","sha256":"f9dc29fd554ae64bab1e8002a6a7e45f15cf7256ee28df46e42ba617dc7bc05c","sha512":"b458575963455da202f7f794c77a6fcc204701890cc701e5081db3fbaf356fc75557245becd45b319a7a312f336ec14f309ddf52ca778616d3c9d00ab85b05ce","ssdeep":"","tlshash":"f4c08cc4b0c32e002617765019af25e4a024803bb0481b039da8d8883e620b49233ed8","size":153,"data":"","first_seen":"2026-02-24T15:49:19.028427Z","last_seen":"2026-03-02T23:08:53.843591Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-06-08T12:43:52.042696Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/ac-chat.js?2.2.1771519117885","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","size":2311,"data":"","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-06-01T14:38:39.409214Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c1155eee87487f5efe9634a03695b16c","sha1":"2532dae40bd8f2c93a9eb7cbb00bf21e050124b1","sha256":"41c9b4311d7a14bda7da372afb964f0bf08f0823e01617a967aa9eb2554d298b","sha512":"ae1174eea2e3597d1ecd46bea51c7948e05095c00c03cb3670e5b62dd0c14abd26e7c3643fda485610290a4426fa92d0c9d7920303a7bdbc659f735313f2ea48","ssdeep":"","tlshash":"28c08cc4b1d22e106606641010af36e490298426b08c1b028ca8e8892e260b08237fec","size":148,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-05T10:33:32.173255Z","times_seen":408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T06:01:07.24381Z","times_seen":1577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5c7a39acdc80832820021580392fcb76","sha1":"a6978212b5941186e837a6216fbb774e529a2c0f","sha256":"50f915c4f4c0fa8f5d2c082a202659e6e67e6ba0ee02779b736c68ff2a0da2e0","sha512":"82b2b29d46269860ca9c6c31cb3c1065003579186ad2df34a4340ac939108b26cf8877e3a9a0e6d112efc75e7e7876d6d1f958dda85135c0f1294c0c4d02c5fa","ssdeep":"","tlshash":"88c08cc4b0d26d001602641160af34e49024802a74481b028cd8d8882e230b0a237ea8","size":139,"data":"","first_seen":"2025-10-12T15:34:03.485106Z","last_seen":"2026-06-01T14:38:39.531298Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-08T16:32:21.001756Z","times_seen":881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/assets/index-6rCwyYpM.js","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5287ca0b10c03e9fbc8736f84ec84b61","sha1":"7953dee69c4fd16c3acc883023d7315ede52ef63","sha256":"81de3bdb891144705aebe55ea80f7f993826c802bebbc22e02d5a7782a7eb025","sha512":"22975612d47c0cc69d47b88effeddbf1f7563b7d4e9882dfe2480d15c7885417b4504767a0c4b2aea205f20dc209a31cc1b1e9cbca0cfda69549766b95070acc","ssdeep":"6144:ejUolI4Wx7Qq9P7eXLQoJ1hHGylBM2KkNH+vV:ejUoS1QqJEmcBXKkNEV","tlshash":"6fa4e581f94aca7debf7a464509d2500324c3fcad00889a6f6fd9d062756db8736eb34","size":460314,"data":"","first_seen":"2026-02-25T17:59:20.249047Z","last_seen":"2026-02-25T18:42:10.635044Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5f3ab12d935926923cd234cc86c658f0","sha1":"4ceb77001ba466756e20d597568bb3fe1da01138","sha256":"0a207956f29d9546e41a4e3b8354ef52baeeb8ae4c8a5c82252e64f528425a4f","sha512":"1e822812677eac95e857a87c73cba93104bc07719a8144e63731529672933355451f9f0e38ca48254f749e7c8dedd76d149ad6feec1527523b08f069d1baa928","ssdeep":"","tlshash":"f1c08cc8a0ca2d001612745010af25e4a0248027744c1b128ce8d8582e230b08233e98","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-08T16:32:21.025216Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c8ce3f50fb953a3119d1f04d892873fe","sha1":"03527b3b679c6ff8bf1498f59118ddb0bf643020","sha256":"2b2a5277eae756e284eaf77b3ee3ca4603fb7c1d2c849a303724bf08e73b3581","sha512":"1af140d7a5d051a6eadece1578e8429ff1375e3d2ca59b8d4dc0ec117e289eb26d955deb2ed26b0af3ce0e1ade9b6287c45b5b2fbc53d185a8c29241653788ab","ssdeep":"","tlshash":"a7c08cc4b0c23e20a642651410af38e4d02c842bf08c5b02dee8dd893f620b4933bf98","size":154,"data":"","first_seen":"2024-08-29T17:49:52.046975Z","last_seen":"2026-03-02T23:08:53.847466Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-06-08T18:19:10.621971Z","times_seen":938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","size":4366,"data":"","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-08T19:31:04.126986Z","times_seen":36486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b1dcfa69604091c6b34e7d885ffa476e","sha1":"6fea510b921781ce00aba383120bb1be83e38522","sha256":"a95b8e1b8b49c34e4a6d0d7028a690a10957f373a79584d0787c6dab02693a5e","sha512":"b124dcc683d061ee449bad373209adc2c48dc9a3d9664d3c4bdb890ab460a85c9872587d8f21a3fa2f074bd72046b0e8f49b5d3978ee1cfba4e0cc34b369a498","ssdeep":"","tlshash":"72c08cc8a0c77e501a42655029bf24e8e024416ab0889b039d94dc4c2e630b4923bea8","size":148,"data":"","first_seen":"2024-08-29T17:49:52.033375Z","last_seen":"2026-06-01T14:38:39.529854Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"947fa9460b78da5bf3a36d0aee89581e","sha1":"a0c995bb6c193c67227966c99d556cb2de983606","sha256":"2386ecfc60e6c3e655fa3e95d0c50b74329d5c327e06f7ab50274c983786b2b3","sha512":"f6acca9061dd2b0be3a166bcfd4c141e1ef510c37ebbc692b8d23831b116497ec33bdf1cfe86969ccec4dff01c3ee5ccdd7e99eab6abb5da1f617b8083a1bd25","ssdeep":"","tlshash":"27c08cc8a0c22e101616641421bf28e490284027b8481b029c94e8482e220b48233eac","size":143,"data":"","first_seen":"2025-06-10T12:05:18.846328Z","last_seen":"2026-04-23T16:02:09.218799Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cb0661944fd6f726de9cb8d41d03f277","sha1":"e3c83deb23d3e7cb6530db0f707d30e911010756","sha256":"dc657a87733e0eea7cd5e17e4bf81aab7127676448973ab55d2a6850c346d459","sha512":"c4a3eaf67ae4ef3318bc5b16cfd45674e3bc984db82cedfabf2b2502205ad9485dfa9551315c90cdf0aef65a2f6b73c807d60056ea806e7472c35d69213e6261","ssdeep":"","tlshash":"3cc08cd4a0c66e506602681010bf29e8a0344026b1c81b43cdd4e8883e220f48233e98","size":148,"data":"","first_seen":"2024-08-20T09:58:59.114626Z","last_seen":"2026-06-04T15:28:13.473834Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"27369faeba2762e736258c0c9574a0e7","sha1":"be7ebbf2fcc9415c65cb9984ec5e7e98227524e4","sha256":"4be4401b4fde8249fa49202a6b717b19a8214dfc2aeee5143076daed51fb1598","sha512":"efbdadbdbc19520c981267cd8c79dd8167a6bc4443b5259721a1a955a1da3151ce82af7ecd4e34ffc1a100b2653991c3c31e052b5981d30f58d51ae106b254aa","ssdeep":"","tlshash":"adc08cc5b0d62e0026026a1411af28e4a0284026704c1b078ca4d8983e220b08233eac","size":142,"data":"","first_seen":"2024-07-18T09:19:30Z","last_seen":"2026-05-01T20:06:15.303737Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-08T19:31:04.128794Z","times_seen":38769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"947fa9460b78da5bf3a36d0aee89581e","sha1":"a0c995bb6c193c67227966c99d556cb2de983606","sha256":"2386ecfc60e6c3e655fa3e95d0c50b74329d5c327e06f7ab50274c983786b2b3","sha512":"f6acca9061dd2b0be3a166bcfd4c141e1ef510c37ebbc692b8d23831b116497ec33bdf1cfe86969ccec4dff01c3ee5ccdd7e99eab6abb5da1f617b8083a1bd25","ssdeep":"","tlshash":"27c08cc8a0c22e101616641421bf28e490284027b8481b029c94e8482e220b48233eac","size":143,"data":"","first_seen":"2025-06-10T12:05:18.846328Z","last_seen":"2026-04-23T16:02:09.218799Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-06-08T16:51:31.596607Z","times_seen":3525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/assets/vendor-mwVb00cY.js","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"85de237a4961ecd9c9114af67fd30bce","sha1":"855362472755636850c5d06d01dedaaf66cdf3de","sha256":"b941a69ef01ac903d02221c271f1f8f131b56cf56a70ac69db58de6ad5360673","sha512":"573d290d83cb2d046472666598b9ff61db4f37bc18cc78042325fe9771a797ed42e77c33ad6b3ee17839eb109127b618eb52bd1aa790261505bfcf8896002c9b","ssdeep":"49152:2qcTs1zrW/mNMd4hRG1aos12EU5IHjdOL503MfDSyU7h+y+MXmPv0TzRZN6AnhhV:pR3Y3AnN","tlshash":"21b52bb8b291b07543a770e5007f0907e739691b704f84a8f669d8da7cbc94aa177f38","size":2275844,"data":"","first_seen":"2026-02-25T17:59:20.250281Z","last_seen":"2026-02-25T18:42:10.683757Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-06-08T12:43:51.970856Z","times_seen":525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/#/home","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T18:19:10.794053Z","times_seen":5637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/assets/en-ty6Ano5R.js","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37e00caa47ef41d0c182c28e9757adfa","sha1":"e668a57842ef1a707be4b8d31276d891b5d00bd9","sha256":"122424a150e7fd2705a449b5472db897783a267106199af42e06d35ca5c56ccf","sha512":"25699ffe8a3032740417d6485e6372aecba650a16eb6682741c170bcefb144ebec618847ddff5804fa806e626c52596f602d8625be41de89b0743938298bf228","ssdeep":"768:KGtZcEw/o7rgOY5siqAMnIUGlg2Pm0sPScHo5xJnvunSH:upongOiuIUGlgwsP5Ho5xZmI","tlshash":"7a23e68d7e174c9a05e3633a78ce2a6020f509c18755880f5fecc5fc53e1b67a7a7629","size":48750,"data":"","first_seen":"2026-02-25T17:59:20.22146Z","last_seen":"2026-02-25T18:42:10.632161Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/2d45232a0b2345f1a9190f6222764c83.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/2d45232a0b2345f1a9190f6222764c83.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzwFL1hzQa_6Guq1WJJR_JAyhnElzwCfo6XXSJznR5GomzZNwCR2Iso9T4fIeHHHLD3\r\nx-goog-generation: 1745018940732464\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 25649\r\nx-goog-hash: crc32c=DU6x7w==, md5=ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 25649\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:00 GMT\r\netag: \"670c723abc22056bc5368ca2a97dd6a2\"\r\ncontent-type: image/png\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-06T04:02:55.294395Z","times_seen":678,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":92,"dns":5,"connect":22,"send":0,"wait":70,"receive":2,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6f03fdd34796404994799c134cae0fcd.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6f03fdd34796404994799c134cae0fcd.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4925\r\nConnection: keep-alive\r\nx-oss-request-id: 699F42598B90443939EC29F6\r\nAccept-Ranges: bytes\r\nETag: \"0A83B34E04C80F0F1AE5149274173A61\"\r\nLast-Modified: Tue, 06 May 2025 07:33:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8740341821668478442\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: CoOzTgTIDw8a5RSSdBc6YQ==\r\nx-oss-server-time: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"0a83b34e04c80f0f1ae5149274173a61","sha1":"fd56b7553ccd79d43b1666e4b1fa4ebd07d580d3","sha256":"6e67ff6b7a7535f7983838c3483a03f363573368ca061d2586db4a63866574c7","sha512":"a7c8c312fffe8dee45d84721c3ef9c22690948d76a1ef5899bbdb6eec7f35c5f169b8bf00ab90e8c0ab3677e568459ce6e83f3ae3603f90bb7e24d81f083bdfc","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/x37bmNnx5i/JgLKWTgyg+bZMdQ:gIIHUCD4wa54NF7g+mu","tlshash":"28a17e48a4404847564e467f7a7fbd274b7b99d21250ce089d9e468d8f308262678a6e","first_seen":"2026-02-24T15:49:18.908807Z","last_seen":"2026-03-02T23:08:53.792772Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2459,"timings":{"blocked":1094,"dns":267,"connect":269,"send":0,"wait":281,"receive":1,"ssl":544},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"AUDUSD\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1pGFdgq%2FcQppqaq9h5bHtxAaHE0dB3ONy8zNvSsj9P675xyH8wDv%2F2SBaCrxDbZOM0brJ2YS3Uz3%2BT7JtiB1NH41Z%2FRc%2BIBMRVFwbOl4DYvDiuS\"}]}\r\ncf-ray: 9d39564ecd6bf3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90013,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f9934b28841b84decab497016df73a03","sha1":"f6adf78fbe0d5d567066317888ba732276148a85","sha256":"9ac15e95a75d8fa1a02ec7de512bad8cc3d3a86506db892c84def9588b0f5a2b","sha512":"af9768753b958e6627e6b4498bb61eb0959d7d05f500ca8d707f108f3372233e4512186e25bbe17dbe11e10cae83a9391e04f170b6d8b3ecd173ebd6f66f68ed","ssdeep":"1536:l2QvTGNQdJVfG7guq/szjkKdyyi9kNo7gv5hG8jHJ0wSG7nAClHSRx5:cQc/7nAC4","tlshash":"e993cf705aacc2c89532bdae0f939ee4072239d306cd1dc741ba1c957b54af1a5893bf","first_seen":"2026-02-25T18:41:54.261505Z","last_seen":"2026-02-25T18:41:54.261505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/87261c686fde4971976ddc5b88358cbe.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/87261c686fde4971976ddc5b88358cbe.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxdINxOYWbHJ9Qjvd1XzHQZNy16Sbi-30bBwTQAXqD2z_XhxwivQCUcIntr_fnDop1X\r\nx-goog-generation: 1745018964344619\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3261\r\nx-goog-hash: crc32c=YMCRAw==, md5=3X2Rj9yGkWKUNmQMIwk1Eg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 3261\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:24 GMT\r\netag: \"dd7d918fdc8691629436640c23093512\"\r\ncontent-type: image/jpeg\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"dd7d918fdc8691629436640c23093512","sha1":"cdee6f46b4d5c790f3aa2c982541c7a85cc053ed","sha256":"9b62ba1641b776cc54c19c6cbdd6ba513943e00f5ab98570bcc5c3b643920228","sha512":"c793a7cf86cce56cccab025a402050ccbd7c0f2422d539858c329bb3b331a2b579d76db03e6f7ebd78a4cbfa90a2c873978238507dee8c6e7baf7a0109212fba","ssdeep":"","tlshash":"48616cd6795349161ce77d24833f066c8ac50e1f215e50956087a6ba39df6a0e0838f3","first_seen":"2025-02-06T02:55:20.496923Z","last_seen":"2026-03-20T19:46:41.804599Z","times_seen":44,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":92,"dns":1,"connect":22,"send":0,"wait":25,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/charting_library/charting_library.min.js","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:26.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-2a6a\"\r\nexpires: Thu, 26 Feb 2026 05:58:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2558\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ce1Sht5tg3wiaFjj4iVot0i4S03BEYWysdtE6fK4qBuTG2lDaelnBAmW0ovYHkPy6FN73X%2FvnfFAqUubX9G1D%2BDh4nnZvBJ7Kw9Fwf0%3D\"}]}\r\ncf-ray: 9d39563f6f2cf3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-07T23:37:29.554045Z","times_seen":519,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SEPUMtZcIFPprnWL0RX4zuLdNNXtA%2FOmNjTDrW2rUDJKec74TH%2FzINJPKAjnAns9u06R2oxmRZmI%2FOeXF3KIYQMAjP2YqpiYH0QMqerUSB%2FkGiOp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bdc43f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"EURUSD\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:30 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXvX3W4RMeoOBiarJWNVV7XYl4WNia8H7dqfJ5j9PKhANrP8AfA6%2FFBL0mmpCdmgcIud%2B%2B2kdtA65QWvd9GyDF0CCJJjqVpf33iLKwDWNN130Z9n\"}]}\r\ncf-ray: 9d39564ebd60f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90044,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"51c009031a0be6533afdee1e57014cd7","sha1":"d8aab5bb7eafdcd1613c76d9bf1e74363c833e98","sha256":"506d9ab2e052c92515f192014a074037326bcf88c4be64af410bd59cf19ba02c","sha512":"ff7cb3b737130c4cd25250d58e84d88c178502cfd7dd46cac3c581c05ecbdb3beef58716abf21f146d9e68e3b0d781cc18701b029881d1a50430b470782bdb3e","ssdeep":"1536:iZbSoFRnG7sd4Jwq+2FURy1jN000dDHNWTAktJ89GDDowCyxjx:iZ2oznGKDtWTeY","tlshash":"b993d6705fd8c89896328cc11fd39ee03d71f9c3a6ce2dc341da2c48fb9462999597a6","first_seen":"2026-02-25T18:41:54.268419Z","last_seen":"2026-02-25T18:41:54.268419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ltc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2y5Ms6n%2BzDcYEp8AAmyCT0BnOS8TqO3J8EZLHeljCvH6YvIwYjr5ujDM3u9ug4RIX4nj0QFFpBaROeN0%2FpYIfB7eVef9ejMYzxBjzNCAprbS1Acm\"}]}\r\ncf-ray: 9d39564ecd6af3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36026,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fbed8bdfc52434639919bd36b27b6d5a","sha1":"ed16ba30eeb3fa9772224020275e5cb2140d725b","sha256":"a1a1f81cbb0974f4b13c8626c4646a6f00c7abe2d728a743daa3c609597d85ab","sha512":"ac9595b34c575a811282d0f34f4b37a5cb8de449dd5ec7f1c69c0c480c595f18c0edb1c0ead1e7c38e4c708c79240486ec97f7f2dbe7bf22ad16a2e8fd12bd1d","ssdeep":"768:hu6u8l8ljKno99pyPVVRNgf+YK+uwP8Ew:hu6u8l8ljKnoPpcZgfv9P8Ew","tlshash":"8af28f34ce8980bbd4369dc25bc7dcd0083733c706ee69d15afb50612ad532faa197a6","first_seen":"2026-02-25T18:41:54.270726Z","last_seen":"2026-02-25T18:41:54.270726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/df71f72a24c8464082c7b899e80626c2.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/df71f72a24c8464082c7b899e80626c2.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyxgC44lyrfPPAGX-fHmTNjbrx8soBvAsGBfQDHqkpJsec1QxYvF3kSqW8YqJkhxme0\r\nx-goog-generation: 1745019025514851\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2839\r\nx-goog-hash: crc32c=WDrOQA==, md5=6MtyVZQjmdQVxtDIhxjtEw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 2839\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:25 GMT\r\netag: \"e8cb7255942399d415c6d0c88718ed13\"\r\ncontent-type: image/jpeg\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"e8cb7255942399d415c6d0c88718ed13","sha1":"b06fdc75eb1e209cba9fad0bd5606a6ba2c459e9","sha256":"bdf49f472e48c3909baf009837595007a60f504776cedde9275226178397049f","sha512":"b8ea7212148eba88461da09375de04cc7f28e5f8a6487b8e9decaff5037acff542156ddeae584aaf45712946ab95e11b7e1b39d97f1f3b41f3faf2c84c70ffcb","ssdeep":"","tlshash":"0c513b9b6ba46137c8e04a3217503a788f060d2f9bc6dd7670c0c655b9617e2e838e0c","first_seen":"2025-08-29T09:33:23.956448Z","last_seen":"2026-03-20T19:46:41.757855Z","times_seen":41,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":222,"dns":2,"connect":22,"send":0,"wait":22,"receive":1,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWy-KDHKS5MrcdSicRqvUbqL1JmWfu19ynOuOCjimCEgZJZY4bwbjG0jcknZtwOMhbr2\r\nx-goog-generation: 1745019064372382\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9740\r\nx-goog-hash: crc32c=d0/XYQ==, md5=V7VWqtqhYHeDi7LvHTUU0Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9740\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:04 GMT\r\netag: \"57b556aadaa16077838bb2ef1d3514d1\"\r\ncontent-type: image/jpeg\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9740,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"57b556aadaa16077838bb2ef1d3514d1","sha1":"f85a35bca10b9f1edcfa8c1697436d9569f4cd2f","sha256":"a657211e0a7d76e9c8e536f6c99e1bca3b335e42d03c857ef1615ab3f4675da5","sha512":"48bf1e4b91578de3c293203a774faab28de03c1e0cde2a734ffa867243723851614b0d52e89c6af368f470edf69dac8184c3f7b13840e38100f01ea1297fb8ff","ssdeep":"192:jvVBLKx0QCmJhGtRfIUiN99uvV6TJhDgYxBVtoBaye:xox0Zc99uN6FhD1BtJ","tlshash":"8b126a17ad41afc8fbcde36894ea1b3af363e62317ab8205402b591650cb93c480f579","first_seen":"2025-08-29T09:33:23.939266Z","last_seen":"2026-04-07T11:52:26.970303Z","times_seen":87,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":53,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/assets/vendor-mwVb00cY.js","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:27.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /assets/vendor-mwVb00cY.js HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-22ba04\"\r\nexpires: Thu, 26 Feb 2026 05:58:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2557\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Ek60KZAeQhWRy9PW5QS0z2%2FKWIdw3hFrMdeeR%2F2ftIxcTGl9ctuYPZiXyIfA7pxS2UJ%2Fypjt4pvONn%2FLWn%2FY3PpXIikElPW9lsVkD8%3D\"}]}\r\ncf-ray: 9d395642c871f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2275844,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"df836c6a7fe4ae05a827c0a47186a55e","sha1":"497bf5f216455fe55bd1e1c9ad4e0034ce96a864","sha256":"ac2d4f77e7d38da79bd71d54aa856a8396916685e5d773c221223ae2941564be","sha512":"0008602b421ea65014d342a5d6326581381ca1de08da9138cfdc8f9bddbbd12b665bde048e4bbc660e324a4ce6d86517e4a5c8b22dcea296b6d4b1dbacd4c984","ssdeep":"24576:2qcTs1zrW/mOcMd4hRGhuBgcuSros12vsG/5IHjdOx:2qcTs1zrW/mNMd4hRG1aos12EU5IHjdi","tlshash":"49250ad8b291b03543a765f5007f050bf33a6919740e85a8f269e8da7c7d44ea27bf38","first_seen":"2026-02-24T15:49:18.972303Z","last_seen":"2026-03-02T23:08:53.766035Z","times_seen":12,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/platform/mgbx/config.json?1772044887639","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:27.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /platform/mgbx/config.json?1772044887639 HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:27 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZ0wSpPBTWivdUarCY4FkpiqoO12F5C0d6blBSX76syR1hx%2BM3s0bb3Ax57Qivy5ZMtSIQ%2F6oAxDURvqwd6t1gQHEP68epMpuXyQEPY%3D\"}]}\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69974a84-128\"\r\ncf-ray: 9d395643c8c6f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7f553295bebf02c68dd1afaf84dccf01","sha1":"e2061d944f2a81994d795a3bba2319ab2ac6da16","sha256":"f0e47f01797b74cac25277649a510284c075d02a00023966e452c74723e6364a","sha512":"4400aba3c9adce5f849f6661644a0557735d8321aef4bbd751a5ee1fd38970ca52e1087b00f018ab164e93aa2cc0eef7cb46cf4e3c70a1ad64f48e2177477b05","ssdeep":"","tlshash":"2ce08c19f1320e0730882a25d8c7bd0065108f6b8c297804f24b8d0caf8f80b29f80aa","first_seen":"2026-02-25T17:59:20.196884Z","last_seen":"2026-02-25T18:42:10.674159Z","times_seen":6,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/common/getAllSetting","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"172.67.165.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0NHPQQlr%2Bqx9sc%2F3wpfd6YnM8zy2x1KgqkGPgBv8qv56cKapossi8C9jjCA8wi1xBARZz%2Bl0rlpF5%2FPazF1PDQAcQSlta%2BWbPG4ysGutOzyuVxX%2B\"}]}\r\ncf-ray: 9d395646febb97af-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14624,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (14288), with no line terminators","md5":"440d15ba156110348ea3392a016dc6bd","sha1":"38c2ec8995c360ed61514b4c60db47e6c9924e20","sha256":"aa3312ddf80d4a9a7f35ca5b6d243a508aa685b02450b6a10c9c5f23e353a44b","sha512":"11aeae4f1650613c2944ffd8ad5cdd3e53806e3f3a4bbb78afe077599ae3c5c797641d4648bfd140de869fc1cc51a301be21cded590b56863ae0075470d0f1d8","ssdeep":"192:rKRLaNV2S5g77Wlvc8tDgysilTPjJ3+muuUtCoXmKnzMX4sY7kMfekMckNzeoykC:Qvbv7QmcyPCXLobExTy12PliV","tlshash":"1862629632ccc87cd9b69afe90773fe6286c3467d580ac4596f96f1c999ccb20c1b109","first_seen":"2026-02-25T17:59:20.229187Z","last_seen":"2026-02-25T18:42:10.674618Z","times_seen":6,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/resource/svg/light/broadside-btn.svg?2.2.1771519117885","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /resource/svg/light/broadside-btn.svg?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-57a\"\r\ncontent-encoding: gzip\r\nage: 2555\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2Fh7Xpf9KheL3HcSOJGU%2B9syGuL%2B6HK4N3HIktOEJrYYtFQJa7BIFjCRQt%2BQNTTI53CaLHe5Th8H5ssl5jx7BuHEtEtxH2cg19A45ec%3D\"}]}\r\ncf-ray: 9d395649eb71f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c27867c5fa5001c284912358d1088c32","sha1":"72a65c57047f38e6a9eddbb45f4eea4c6f174d4d","sha256":"521cc1eb8e60fa4570402a808ee3efc57966814258a1f90f3d0c83780c3c3686","sha512":"c18de18544928f4a8973bc78eb61721724833483b3b071758208845a12026413c6c373a479809a3825dda32c61d1137a23fc2412998a819f7af9e7598061f9fc","ssdeep":"","tlshash":"7921f8cb730c50c1e601a3e8a41676ef029b70db4eda8e5f68599dbd771e4a32506170","first_seen":"2026-02-24T15:49:18.956226Z","last_seen":"2026-03-02T23:08:53.792105Z","times_seen":22,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/common/type/defi_activity_type","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2Fksqqyo1n8LXd6WgiXG3OWWdgYtKpZBJyTf21ZJXxzOVMvxMAEJJIbmGgVF0iivvzZT5hoSHKPHjYURpwvFlPt8%2FsRfL%2BqT3m4joXfCM1uqSFDu\"}]}\r\ncf-ray: 9d39564e2d2cf3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-06-04T04:33:14.419392Z","times_seen":666,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"btc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LC7L115wx%2F%2FXXhRetsH0ojM8QCNXwy7GFAnpegeyhAIB9HtV0xcRRUG7%2Bip3Wn7sFXTU7XJ9kUtbDjeExeYu6pn0ZiJvs0nJIkoElQ3rrjqaJpZO\"}]}\r\ncf-ray: 9d39564e7d4df3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42161,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b29a6a7e558b9d31129182d69d31d590","sha1":"74bef841d238fd45283aa4910895f2b8dd360608","sha256":"cf4f999483a0d6e64775e5d5a0823a116061ff85a2bc1da7084b9744a1476546","sha512":"3f469edfee2d350c47bca3a9f87fccace69e22c84dab080cae974bf71b4a6a2fac95b529a67574a166e084803d177bdcf396a91f0bb2299bfd6a94109af78b95","ssdeep":"768:RHQWASSqtOe8OaNFXlGJITUo4Z9jsUtWi/MItUyBSuJyJqIA5:RwWoqttaLF4LsUtDpD","tlshash":"0d1302b07bc58189e93fce964fd3adf0483673d706cd8d85a1af53117ae4222d508ba2","first_seen":"2026-02-25T18:41:54.278915Z","last_seen":"2026-02-25T18:41:54.278915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/ac-chat.js?2.2.1771519117885","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:26.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /ac-chat.js?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-907\"\r\nexpires: Thu, 26 Feb 2026 05:58:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2558\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGJiOU73ZyUsxj2BzNSgdKnNx2bDUt3g47ajTWOi8dPTzPU3MUt30GxFu9CD0At%2FqqFeAcbWaD4gWbpDu2xJor2Qsc3B6w%2FqWN2SLc4%3D\"}]}\r\ncf-ray: 9d39563f7f31f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2311,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-06-01T14:38:39.409214Z","times_seen":133,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/68af50d6ba294eb5ad837899402a086f.jpeg?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/68af50d6ba294eb5ad837899402a086f.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 659\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425A8B90443939782AF6\r\nAccept-Ranges: bytes\r\nETag: \"69BFDE7D3F9D75ECF686FA62D197CD99\"\r\nLast-Modified: Tue, 06 May 2025 05:07:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 531088427868187199\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ab/efT+ddez2hvpi0ZfNmQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 20, 8-bit/color RGBA, non-interlaced","md5":"69bfde7d3f9d75ecf686fa62d197cd99","sha1":"00d9b3ca148fb1d9bf92af0f4867b98fdf08b217","sha256":"29528a9ddfbfb6c42d16b4269970d56c72a28473571b7cf860159240edd9bec6","sha512":"7178c13d000b13decba9b132d7b6693ba5486091812aef6efc5c5a222c826c9cf3dbd76b82693caf2448b6c27bf3d122f292c234a891f75f881698fe3e9ab51e","ssdeep":"","tlshash":"c10168930e983f59cf10247fa8736306d9d8c1f767449784f44244a324d5645cd3958b","first_seen":"2026-02-24T15:49:18.966172Z","last_seen":"2026-03-02T23:08:53.794213Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1935,"timings":{"blocked":1664,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"sol\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zayUKCsXxhdhcUsJiPBvPI2WAvfIQJb7LViZvQqDpOZ3cHgEHyI%2F5Cp7TlUoCX0g9qErJtG072JYzXo%2BmuBHSdH0DkCv9ENgW9c%2FV%2Bet2ttqw6JW\"}]}\r\ncf-ray: 9d39564e7d50f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36443,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d83762a9c5446f50ec55304b117e930b","sha1":"114fb78ff5136d6bfe20d80288362132966a6cca","sha256":"21e2cdb160d6f37cd7c3ce453102b463e7a76615d1027b3007b38666aff5c67b","sha512":"af8bff6cdd8e3ef40a90d6d8330373b2cb1af85389ffccf2e38bd8a2895c662cec309e7d1a473f55545ab14832cddf4988fc2afbc02c98132ecd52df70407584","ssdeep":"768:LHuISWAR1qgpzTAMaAI85OExPcqpHMY4QtyHTHvwHkHTHBH/7u4AY9CuIrScm5Aq:JNHTHoHkHTHBHvCRNPxWPkN+238","tlshash":"83f2b434ce99c38ad4326dca0b93ece01c3a3bc306ed4e5595df59212ad7f6791097a2","first_seen":"2026-02-25T18:41:54.282594Z","last_seen":"2026-02-25T18:41:54.282594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/32722e3696ee4bd28f72666655705db9.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/32722e3696ee4bd28f72666655705db9.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxNM00pSgOacxEmNPdKIOFUAxb4l5ukp1aeuU28KAwfuRjnVj397rmx-TkkLZddxm53\r\nx-goog-generation: 1745018990111126\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2274\r\nx-goog-hash: crc32c=m9RbuA==, md5=Z0sJmfYIMISipLHYsg87wQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 2274\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:50 GMT\r\netag: \"674b0999f6083084a2a4b1d8b20f3bc1\"\r\ncontent-type: image/png\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-06T04:02:55.304252Z","times_seen":638,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/resource/fonts/DINOT-Regular.ttf","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saltuspro.com/assets/index-i1ncJbtk.css\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 46828\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69974a84-b6ec\"\r\naccept-ranges: bytes\r\nage: 2555\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akFdQwrIgpFuWzGaAEPaCDaMQCj2jFGHs3iwll1jyfWJwdgsObdWBISl0sFtCj6Rhw3tiQxRA9zNYobw%2Bh1YeZS1waJ021RNKac09Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564b3c00f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-06-06T23:47:44.173744Z","times_seen":265,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oe4pp1jo6v0M7nMrwXarSbIgqN3xDSzMijda%2FJRJqQQ%2FmfdBqtgcuOnAGknoF6tAo8%2Fh%2FzSHoHpTrM2kmNIi%2BgZSAaeKKLPY%2FKfCGDZ7mfAsri6B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bec49f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sq64HFsNIXfEFt27lo2aX1drQrKXBOJu8ciAf3eQVA29Srpr84x2WQ50KOMScdouWq95zOswcn0N6BP6A8UQlBKH5jJdiQNTs88ZgqW1sFidfBrn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bfc50f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FtpdrUdLESHHuUEewTRRszWZFTZZoTqZYOPPjnXj%2FuRxbGW9Tutv2VpiMsfWHJs29YLIrtqM5R%2FTiy%2FTxuK%2BWX%2FOPmHXpzGmB4vS%2BNmqravbVxLg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bfc51f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"gtc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ffh5xCgejUUIfd5tg8eWUp2fKKg%2FMer1eMHM3DyGtnSA1MCaz1Y%2Fsl3mv8Pnr59KLVzsFQo5h9wCxZPhnOxx8YbfYfx8hKV5y7tINxUVpy1iE%2BJ4\"}]}\r\ncf-ray: 9d39564edd6ff3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34367,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b241b956443300e276c4305915d92510","sha1":"4236a832bb3d4aa521e0b57e3eff89a3885d97f3","sha256":"3cf5436b39dacc71ad843d2e9776bfe9570218f94fe137be98ea86fca5ff2985","sha512":"ed6329dfcbe3292a38a517a13567cb554e3a5d3dbf2ac486a4735345a4f7056d1b16c169b6ec69085ad4e86d5432c5fbacb880c6e4cba32a12ccf4eb6398ced3","ssdeep":"96:yxD/B4mxuLv9egTrH+twq3TTE6rOndPIWFIxdWrHYHTr/ihr/iTrq:0DWmxavbPetb3TToIC","tlshash":"bdf256391a489268d0326cde2f9b6fc1a6253ac74adfcdc1519f2d0cfa5435793893b2","first_seen":"2026-02-25T18:41:54.286077Z","last_seen":"2026-02-25T18:42:10.662795Z","times_seen":3,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/88728f47fce24ffc9b058781d5511127.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/88728f47fce24ffc9b058781d5511127.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxWa1X3ZKa_9nhtD6H0zxwXATh1WnUG5NkjUp8dnHLtuGolbNMDqDVyYTSVk1av9-0r\r\nx-goog-generation: 1745020334043985\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1717\r\nx-goog-hash: crc32c=Nlh/mQ==, md5=wDYR9+ijfd9z5qYqQ+rRlg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1717\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:52:14 GMT\r\netag: \"c03611f7e8a37ddf73e6a62a43ead196\"\r\ncontent-type: image/png\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":1717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"c03611f7e8a37ddf73e6a62a43ead196","sha1":"f5d6f08be3d751747f618cd7af90f4ec8dc3d97c","sha256":"a19e79dd72b71fadceabd2a6cfcc04b18738157e104b54cf960eb17ccd1cd6ee","sha512":"968346372809cade34940284062a06ad5811a15ff481584675cdea3d77addda5b6da00562479f7ac4a98a8a289d70cde9d409d024048039f354cbc5b200edb08","ssdeep":"","tlshash":"39313a46b4497a5e02e204ff815da62b0f99ee43f0f89308ae60d04c3d718cfc91a0de","first_seen":"2024-12-03T23:58:43.643729Z","last_seen":"2026-06-04T15:28:13.437662Z","times_seen":106,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":118,"dns":40,"connect":21,"send":0,"wait":53,"receive":1,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyUWQCTr0n7y1R1B8aIBHFcxvA46SQjaOvanl581z24WniuUHuB1y9nUUcgr7EqXpv9\r\nx-goog-generation: 1745019079859499\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3817\r\nx-goog-hash: crc32c=nHBXww==, md5=+nrXU3XMeAaFfbxtWQ2yHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 3817\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:19 GMT\r\netag: \"fa7ad75375cc7806857dbc6d590db21c\"\r\ncontent-type: image/jpeg\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"fa7ad75375cc7806857dbc6d590db21c","sha1":"973a54bcc76c2c86ad0a41a7eaccd8d2a2686a75","sha256":"8ed69043b1cea67b8ad4234d9fb6f18f44d424aeea7181930df009866ea5a452","sha512":"3934b78cb9f04296a8792c7ebd652454730ff8c5a97a4d7c1d6053f634a7d029d0577c20cdadb822430b57d5e59299f8e4564d9a2f4d84c8c08f10fcb3b43a87","ssdeep":"","tlshash":"1a718d22ecbbc800fc15db1a6d5b6562313b36e314d4e9f716cc0dbe2e1670486b0123","first_seen":"2025-08-29T09:33:23.930899Z","last_seen":"2026-04-07T11:52:26.857898Z","times_seen":87,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/common/getAllSetting","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"172.67.165.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:27.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zOJN6r6P6StXKqGzpjZOzzSR9KqvSNs%2BBbX80%2FprMpD3FJ9vegEwq1ynxXBpFzVVE9InDUS4Y0NR%2FRjLWmCpMJ5OXjzuDdn10UEF8ckcyk8rSXG4\"}]}\r\ncf-ray: 9d395644280b97af-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":44,"dns":1,"connect":8,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/614edb0c13d64fe398846c644e242455.jpeg?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/614edb0c13d64fe398846c644e242455.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 251\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425AAB67323436788483\r\nAccept-Ranges: bytes\r\nETag: \"179E45FA5B7A04DE36EA34D27B7906C3\"\r\nLast-Modified: Tue, 06 May 2025 04:58:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11945627775884748038\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: F55F+lt6BN426jTSe3kGww==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 20, 8-bit/color RGBA, non-interlaced","md5":"179e45fa5b7a04de36ea34d27b7906c3","sha1":"cc420d32bfcc7147b44d8727ee8898d7158e73a5","sha256":"c35433c06bd42a4e041d9e0dbb8fd15d0d58dd2b0c7e7c97dfdba7df87b3f3c2","sha512":"37dc1e8522613b688d1cfd1d182531b80dc97c75e7391b236ca828b76d17aa3cd3cf7e5f723b080ebf022e45eab2e47b8d98a660455473c79e0abe791fadab82","ssdeep":"","tlshash":"b4d097c7b361bd24c3c466332a4983104ca092801350630c04044235ace32c82ceaa42","first_seen":"2026-02-24T15:49:18.981019Z","last_seen":"2026-03-02T23:08:53.806049Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1877,"timings":{"blocked":1601,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"trx\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S8Wn84s4jDPEaEMEs%2B5vH67mP0z1N1YQtcTpfrf506sWrPz1Oq3k3vmOV6RvG6b3yQYMrer%2FZlllBe4ZZUquom%2FmeasZn1xlLR0f3ChK14HwsWYF\"}]}\r\ncf-ray: 9d39564ead58f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38023,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e033e1988e033768d1e94de579960576","sha1":"44e2dacf978e2b76f09ba4a31922bb96b8adacc0","sha256":"f8df2b72a682d9e640c6ec2eccc92e0e636608e05d7f61795cb9164be1cd0f3b","sha512":"171d12521f316db369cd74d2c73494bb3067203a2a45544713825db9198328b717c83a9fddb636e272645d294851be7624251d294202df2d5e2fc8615ba422a8","ssdeep":"384:NtGfFEEOkLy+mj0teIynOYCwnFL0MfwImKQGviR82C1G/+v+PVPIsxGL4MR:NtKFmkOPUumPIsxAR","tlshash":"5a0386604ab5960ac536bc8a1faf69f0d46d39c30acdccc3519e1c1dfbd4221a4b97b6","first_seen":"2026-02-25T18:41:54.290522Z","last_seen":"2026-02-25T18:41:54.290522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bch\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=klRKrMvZqQScAYFpthnPDqEpZV7wdmkt2%2FkhFseQkobuwWsP2hL%2BpzJXs2GiMs3rZBnsyRL6q3XpsFO0SJ5H5sxHb8lnr9pTgl0QJ%2BlxQyqcnTAV\"}]}\r\ncf-ray: 9d39564ebd64f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35610,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"07d6836986d8c718c7aa06fca586dbc3","sha1":"0f5aed16614b9e79be8cced9d1db205b5d0c9eba","sha256":"9c2162571c238dbe2b889a2ea7b509e89ebd5204cf048f4ba534a4874fa4562d","sha512":"cea997180fa86211d9bb7124a5e01a7914d59b46591951155407f3b32854f71c56381cbfd29552ad07c3d56ba56e01945562bd5cb8109a42397395b3a04ba0e8","ssdeep":"384:MIs2VHH25pIA/JgtKHcovmOaeVdGv379UE0NXpMcu00Qpk7xoVFeU/qkTjlebwlP:MbJgt8covmOaeV3E0NJ","tlshash":"97f293754e9a8119d833ddb71bdb9cd51b323cc306ce6d1664ab2001aba4b27e38d367","first_seen":"2026-02-25T18:41:54.292458Z","last_seen":"2026-02-25T18:41:54.292458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"AUDJPY\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5gsHBDicf0b4fTPxlHXPyB6m8amjQ22sG%2BgRl44mazDsB32ueqpJ7dfpROWIyBf8D5EfsoHVoHomYA0I3NTtYKm5z6SrhgUI5rvtEz3lkqo4xav\"}]}\r\ncf-ray: 9d39564ecd68f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f669c63e059f891f4ad8b502499ac2f8","sha1":"b3475b930fbb448ec10d412ea212cbfa5841550a","sha256":"af9fb81364ce3526f7d6d4d953b8699e8ae110dd0dcada60c50fec18729422cc","sha512":"d768fcc6b788879ddf59ad68a74ff68a3f938d56859eafc9b423d84cd1504e2c255685a18e4205e8a103f12e2d5ed74199011c2cfd7b8e027e19031a3efc7bc4","ssdeep":"","tlshash":"8dd022aa15c040e315cb438b09ea0b15a5b8107c12a41308a9ec8ba0c2cde6ee386a81","first_seen":"2026-02-25T18:41:54.294675Z","last_seen":"2026-02-25T18:41:54.294675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"GBPJPY\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FDbq3c5Zl6kZM8lYky8FVuMrJb19LkjcGZ%2B3CVROcK3qEBDznrtgNSvBocXSVVeVTAAZCB3NFl2q9tLzOxiLHa5Z6nZHO0X%2Fr2oPzuepIxptVtw\"}]}\r\ncf-ray: 9d39564edd72f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e256c46c2031e6449f263a982926da15","sha1":"ed9f3d21b9463da2761f53f3d83567cdf079ac92","sha256":"4d9df7e4c24c683536b069fad5a4192c621c6e6df08c5fcac97d243af002bd38","sha512":"3c8114fbaf6d743e491e8fe02fc156965f25cdd30f4926825dda00ddb3ff5dcd358c9604cfe539af5cd771a17e9cc8f911fe9f582857b4281a9e16a9b13afe68","ssdeep":"","tlshash":"dbd023ed59a04592515b82c741410304525c00089120570dfdb9556485fd77d134b844","first_seen":"2026-02-25T18:41:54.296386Z","last_seen":"2026-02-25T18:41:54.296386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxdAsxJdODT3J2wmTwRhvsx-caL76X_XLhXAJtcdictOk7mk7BfTrsQWLJVvW1Z-ODk\r\nx-goog-generation: 1745019054266672\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9320\r\nx-goog-hash: crc32c=NRpzvw==, md5=8Rfh7LmmWZKkoSeq5xR/PQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9320\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:54 GMT\r\netag: \"f117e1ecb9a65992a4a127aae7147f3d\"\r\ncontent-type: image/jpeg\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9320,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"f117e1ecb9a65992a4a127aae7147f3d","sha1":"d31cb59eef02bef662f2a32927486fdb0bba9938","sha256":"c41539a30a96d819192c0088fb339eb265079a33b835550da4d67e239ea658b9","sha512":"82a5726b19387f79608c7ca92ead96d09e0bce5d08ca0c607b93412e5110607926ae426b869bd993a72ad0f586bf82c39099ed02e051fa0a573db3ff1345444a","ssdeep":"192:afKC5CG/uzpL2j2tll1RXLhL2yjT0qLiaOTMNEdiq:ayCEaQLzRbV2cTLLiaOTMdq","tlshash":"90128d85bd31deecfdaec33917d3a316e293e93b26d149a851026b1048d3a3e5217635","first_seen":"2025-04-17T23:40:09.012509Z","last_seen":"2026-04-07T11:52:26.867546Z","times_seen":89,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/a2a650f7246d4b0e96090af287b61841.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/a2a650f7246d4b0e96090af287b61841.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWx0q7jo32426P5cfTHRff25IFJz7_tabf-zZU8UnluijT_DqmZ85Sb4UE0Ae-4CXEY-\r\nx-goog-generation: 1745019044982235\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8388\r\nx-goog-hash: crc32c=LBL3jw==, md5=wryJC9aSNi74POLpGY0i7Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 8388\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:45 GMT\r\netag: \"c2bc890bd692362ef83ce2e9198d22ed\"\r\ncontent-type: image/png\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c2bc890bd692362ef83ce2e9198d22ed","sha1":"2da6624b154fa3c70f6d48fa0e32961622494791","sha256":"7c97f207862ee766fb394f50e87f423fd7285c44ce125fc51e97d38e54b949d8","sha512":"e801ff56b048aee4050bc1d689d8d375c5c04b5cd8c6864e4a283748084910fef16171feb86b114ea28bf4ca2da755f08a309b87f0d468b885a13ce6a34aaba1","ssdeep":"192:RX31VARGlYA23xrFPNtSbCPK+LBGVzBcv8VG51uDiXZtIJ9/2SYFrP:x3vARGlYA2RtSYL4V2UsuDiJ+b/2SYFD","tlshash":"1402cf08ff694f508cf499d2e1147aa278848df2b0210b48e3d7bab913983991ef35d5","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-06-01T14:32:25.092225Z","times_seen":65,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":44,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=anGANuxJjv8lydVpUVFl2PUjQcQDyEp2Sm3zr4E4y6IlwEewY2DijxqLsZ6B4O%2Ft5X6O3RalXoHPExf4aZrXw8IBtkZNIQpq34iI3CjqJid1cljr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bbc37f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/1ebb2376c5dd48f7a1df146a6952d4ef.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/1ebb2376c5dd48f7a1df146a6952d4ef.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5089\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4259AB67323436CD8383\r\nAccept-Ranges: bytes\r\nETag: \"7D08C0918A37EF7C4A7803CC1D60D32F\"\r\nLast-Modified: Tue, 06 May 2025 07:32:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 437787349929467240\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: fQjAkYo373xKeAPMHWDTLw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5089,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7d08c0918a37ef7c4a7803cc1d60d32f","sha1":"0593086aaa9eda4031c2e4ddb11abe29e2234756","sha256":"cb355dd7f116335df96f105860d50a00693783a46867c380d46bb5dca14c732f","sha512":"8526693512dff9a39f89a83b14291ac79f21ffecc0779d92c8eab2ceea348007d54b123b312e1e51d7d64c70c2fc592f63dadeb8ab9d1cc5e0d17bb1fa7957f8","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/xWKRYZnE20JNVvqZ2nsqrC3:gIIHUCD4waYKRF2KNRqosq23","tlshash":"61b1bf053182c90d2c4ce9d73269ac448df2f6a053d98e2cefff429bea20d503e11b18","first_seen":"2026-02-24T15:49:18.974178Z","last_seen":"2026-03-02T23:08:53.810692Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2452,"timings":{"blocked":1091,"dns":256,"connect":275,"send":0,"wait":278,"receive":0,"ssl":550},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/common/getCoinList","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"172.67.165.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:27.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uo7gcHkKP9CizV4G2irnd%2B0FL0EShAHmVJi%2Bjumf4kmdnIhTM3bnH6RY284qK%2FRK02p%2BG878Wtkn8dKo7FQS0if%2FQNDsoNH46%2FubvW%2BDF0B7%2FaXE\"}]}\r\ncf-ray: 9d395644282497af-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":46,"dns":1,"connect":9,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/resource/fonts/Arial.ttf","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:27.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saltuspro.com/assets/index-i1ncJbtk.css\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69974a84-ff9e4\"\r\naccept-ranges: bytes\r\nage: 2557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Njpr%2B4MpJMMqHokNqsN6np8B8eN32lM%2BsLQofhb6T23t%2BrAPoWuAHmPzEUX5Y93jopfb%2FYhCSZxfCHTamQW0XqpPvQZry0JMDTvE51M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956405f88f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-06-08T12:43:51.916247Z","times_seen":1330,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/resource/svg/light/service.svg?2.2.1771519117885","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /resource/svg/light/service.svg?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-5ffd\"\r\ncontent-encoding: gzip\r\nage: 2555\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9I0ZMesafx2gsXFkmeUsAmvjYerIhYAGXzFkBIVbfPchcFioYU7g2AYfB9B11SmwRXwLSwhPKeIwgTsz5Pg3X12q044TKhWYdqs9qIw%3D\"}]}\r\ncf-ray: 9d39564a0b7bf3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24573,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cd853da828b851603870f0d3cf3ef38","sha1":"5c63345180e5903af285a33e5a0d3f7ca605fdee","sha256":"069f5d494dba6b80bedc0bcf5835d68ef020b10472c776f185a496a57f3980cc","sha512":"772c4a20c2384bdec4c1ffe4381ab0247e73b68e75f3fa02e0469945257b4a01cd7d717336c660b7e7a6b55c01a18d0dda1dab2f2f3eda820221490ebe58118c","ssdeep":"384:b8ChglOiH6GKAgYJ37JddRo0vmNdvGHiQSq:9hEG5NYJ3lddSxN4iQ7","tlshash":"4bb2393083946663f150cd1c2216be63426670ff7effaa44df8a5a32346af814f9c659","first_seen":"2026-02-24T15:49:18.905144Z","last_seen":"2026-03-02T23:08:53.805331Z","times_seen":22,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/0b5fdfa04d7f4361b303f08ec3d8618b.jpeg?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/0b5fdfa04d7f4361b303f08ec3d8618b.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 908\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425A68F5793130420A58\r\nAccept-Ranges: bytes\r\nETag: \"9D890FF7B35E3A774802C39213EEFDDA\"\r\nLast-Modified: Tue, 06 May 2025 05:06:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16610468948103667661\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nYkP97NeOndIAsOSE+792g==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 21, 8-bit/color RGBA, non-interlaced","md5":"9d890ff7b35e3a774802c39213eefdda","sha1":"33399ae5ab2cdc54ac2e820323d641d32be4dbaa","sha256":"50201724219cea6fbb53efeb55a9729e55787a91679063bbb554fc65a2757990","sha512":"fb4e8d5efb06a74d3992ca61f6ed39d66eee48e75ec652dbb5d08921b27de77ff5a1977e8da59c7c3c7c02f59d04c2d289111901cb246790774b689a3e1695e8","ssdeep":"","tlshash":"eb1196d25fb95900c9d17a3e0e77432ba628210ac141c6ce5a2a7b279dd31abf913933","first_seen":"2026-02-24T15:49:18.931972Z","last_seen":"2026-03-02T23:08:53.794938Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1967,"timings":{"blocked":1693,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/notice/getAllNoticeList","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdqW%2FRCBe%2BcMCZ%2FhmEf3xyN4gF%2FJMhSTvifJ%2Fyax5eRt5pYcgkJSmf%2B69qpqrAkvD7wK8stw9rVa5z%2BqXtZTSJQILZIWkJZ4Hi4Eq4POubWhGAl8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564b7c1ff3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bONx8TRr6aty5GwGnvlKi1kyLAghzkEeXCBgNAOOPMBvGrjgJAZsLg4Tb4%2Fh%2BQLraJJ9kWpevJ%2FZmOJdsQ8oBIK7mTw6JjwIFnRaE6DJf6pGnv9b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bfc52f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/assets/vendor-koayxyHj.css","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:26.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /assets/vendor-koayxyHj.css HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-1f7d3\"\r\nexpires: Thu, 26 Feb 2026 05:58:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2558\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ww%2Fq2fscXiFS9pcN%2Bst4%2FzL6DJ2xVbeazJfgunobYiB0jerINvZEbnQZfdCx%2Fdr0PCIX4g17eY6A6Dw2n0Ev4qfKtjec0MwkX9daNhQ%3D\"}]}\r\ncf-ray: 9d39563f6f2ff3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128979,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"4973c922d62e3c22ff8714a4f12b12ae","sha1":"6f6c9f1c9ee0d9d6aa515aea4e53fd69992ae8d5","sha256":"d9df141ac46247a247e0af5807c6534527f667da1b358997217ce6f2bf5c0675","sha512":"529186ba6f86c555e012d778ce4e2a67d7066e66897b0f462c1fa33e13bb6dfc62bb9f66e508c8fcc2b10324f96ffec121961fddf5967c5d53c914521d8daaaa","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEn0w1Im1Ah5aIzs:ZdN0rxmNH9yDW0tNu","tlshash":"7dc3b4a5e6c491bc6f2bf2659b87a6d8f23cf621dd01caa4f105511c4fc7bf50223a29","first_seen":"2026-02-24T15:49:18.960725Z","last_seen":"2026-03-02T23:08:53.791356Z","times_seen":12,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7QHRtt1zWlw6n%2FOoWP8omZkJBfYDTEz9P3zK5p%2BDxWU56%2Fs5pqacAaVU%2BgihWC65D3wIRoLakk7gxTM64E9Q1DqRmEuCCqTlL4mFq2P1c2rUBeq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bfc54f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/963b8dacccd549929f4dc2f420b32569.jpg?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/963b8dacccd549929f4dc2f420b32569.jpg?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 269433\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425AAB67323436CC8483\r\nAccept-Ranges: bytes\r\nETag: \"21E47AB704EA1A9209D000F254F0AFCB\"\r\nLast-Modified: Sun, 15 Feb 2026 14:56:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12715785409904733189\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: IeR6twTqGpIJ0ADyVPCvyw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":269433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 1216x880, components 3","md5":"21e47ab704ea1a9209d000f254f0afcb","sha1":"5088430fd108cb22a5ba211581369ebb5131bade","sha256":"859602641666615c993973a4623d88aa9bbd3039fd45fc6d9968227faa2f7a3c","sha512":"a63fee2fe13a654bb8a527791f78bc0ffa1c9a207e0cc13b98b7f3db5050b1e4f29e36d8cfadbc3c5b14c34fc3ffbd98d6f655057e0bde3313184781b0d88652","ssdeep":"6144:ksSJM7pKpsy61/5fmR8Zw5xojQC4Ic4Xm6a8pFREcnglX1EmKc:ksCRpsV1BuiV03IfXm6a8Z++Q","tlshash":"33442357f05da4484ddb633ea3a4a4c8828d5035296ae948ed6734d7f8dc4047f2bef0","first_seen":"2026-02-25T17:59:20.18877Z","last_seen":"2026-02-25T18:42:10.634313Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1955,"timings":{"blocked":1034,"dns":0,"connect":0,"send":0,"wait":288,"receive":633,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4yLdG1tcDOkyIDgyPF%2BmexOKUjrCXDHULg7bdh4od2zYgi7nVo2XoYE2GUQDfDVMUcQgXp1jzQmrWiY55IRyrUts97xh658bSzMGroAVzoFqJkX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564c0c59f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/resource/fonts/DINOT-Medium.otf","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saltuspro.com/assets/index-i1ncJbtk.css\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69974a84-11d88\"\r\naccept-ranges: bytes\r\nage: 2555\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TBhQq6%2FQEzJT3JExwp5lE5qBfBIxFC41KVoawPqy7GMzBJwTOdombxYnTmPEALSicP6LewNXkbIKNgPSX3leuOOe5s%2BjrH8xML56Su4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564c1c6af3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-06-08T05:16:21.696807Z","times_seen":961,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bnb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WraUU6PKV7jXbdu%2FQIChVk3KNPcqrorLIn3SVpuln0JSLdmxRFI2LD%2BE%2FE02xSUW7GtlSzEWdwkiWctpi5yB%2FFUYDjE29eb2NbOCjsjxShxG%2B7cy\"}]}\r\ncf-ray: 9d39564e7d4ef3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37687,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d81be0434fdcfd180e7fad72e8b8174b","sha1":"69e8e7976fa72a0e6a7e7c90686c169f32a08b7c","sha256":"3d617f86f894317de541b6cc4153533ffcf1575d34839241de3c3e272dab2eed","sha512":"d00bb5eb6ba15c7c88b7640c058817b43bd910650ecf83f5b7a764bc7c455758e63ae1e25c47bc4e4414ff62c8af2bab20bb3d815ab626840399403e2d36ae89","ssdeep":"384:pi2JnszHbWTDAjefNSfajbDIFNgfuQFAVFvPc9baICkYd6YM4CfWSd6ji3MaqHfC:U2JsP+ZCkCgjcFVfg4H0vJ2e2rc/","tlshash":"fb0362707ac9d009e839ce821bc3acfe482637d347dd9de1559f64927a50e32934dba2","first_seen":"2026-02-25T18:41:54.304813Z","last_seen":"2026-02-25T18:41:54.304813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/platform/mgbx/logo_144.png?2.2.1771519117885","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /platform/mgbx/logo_144.png?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-1842\"\r\nexpires: Fri, 27 Mar 2026 17:58:52 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 2555\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BgwAaqy0cqJZKNb5mgZJVoXFIaa55PcXhRh3CRAHTISkQoBhqifHjBAsicnB5KaUWDQ8Q9BVfr78q1ZUvbNhd%2Fw184xZyGUwObwkcHg%3D\"}]}\r\ncf-ray: 9d39564669f1f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGB, non-interlaced","md5":"19b29cba287aaa488b3d72273b33ba6a","sha1":"a9a16e2a0368551a9359dbb9e5bc642c29802966","sha256":"85597217fc981e9f72807ed790cce1e5218a53f2c2e08c07452ca2042ede57d3","sha512":"fcc066306a22ebf6998a15889a85c82dfdb06773802a193352c7d454998796c341456bb3f71fcb1a6e52ce9f2e67621d06428ea0dc7ae9e6cca9a5c35a494eaf","ssdeep":"96:0k446/M1MnWBIvOxXd8rOun+f17LcB4K9litFQLZ/SUWgsV8DE2p8KVLZ6:0LWibvcX+qun+f1fcB4K/ituLZqrIjw","tlshash":"03d1e599052ef060c0ba47a7bf72dbda711a6e849750dcc3e23d424cfc9455aeb38b50","first_seen":"2026-02-25T17:59:20.204446Z","last_seen":"2026-03-02T23:08:53.78607Z","times_seen":9,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/c2818606e1f24896a27fa250c83ad13a.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/c2818606e1f24896a27fa250c83ad13a.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4522\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425968F57931309A0958\r\nAccept-Ranges: bytes\r\nETag: \"942186ED6C6A899DA99CC318DA8258FF\"\r\nLast-Modified: Tue, 06 May 2025 07:29:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7705412628858224886\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lCGG7WxqiZ2pnMMY2oJY/w==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4522,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"942186ed6c6a899da99cc318da8258ff","sha1":"99e770dbb9b7fcc1360d454b5077d11fbaab84ef","sha256":"ee4a51cb73bcf2360988913dcba4a65446f5d306d09547d21bfdbeb629c71134","sha512":"52c179d1a0a0106c60097e3f20ea0eb7c4c287050f9679535420f6a14adfbdb99a62e55d656591875feaf8a262c1eed2990dde513035540cbeca8b10b2dfcbc0","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/xebjkskLY5GLVb7ugAcLmQGQw:gIIHUCD4wasj1kUERb7ugZmQGQw","tlshash":"09919d888c00091e408dc2213afbcc5a8a6b93c483483d09eef642bffa118213e90f27","first_seen":"2026-02-24T15:49:18.982607Z","last_seen":"2026-03-02T23:08:53.793488Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2447,"timings":{"blocked":1087,"dns":259,"connect":275,"send":0,"wait":274,"receive":0,"ssl":547},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/5d89931e5a664a5c8f10399a9ef1deb5.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/5d89931e5a664a5c8f10399a9ef1deb5.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2443\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425A794D1033302CC799\r\nAccept-Ranges: bytes\r\nETag: \"4293EAAC59FEB032DE4A5652D8B2D230\"\r\nLast-Modified: Tue, 01 Jul 2025 20:27:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1686462358747034201\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QpPqrFn+sDLeSlZS2LLSMA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2443,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"4293eaac59feb032de4a5652d8b2d230","sha1":"b1cf8998998b07e4e999de9a5c5f0dd78b2bd27c","sha256":"050438b84bd443784268f9b1ececc38646e6be351c42ec46e79d3600863a7baa","sha512":"18f5799310bef05227d46d0e1ba6e508adce2c0a50bf8527c886e3bacb20f043bef69cbf2ffef6239115a734238fa9b6e0a3cce6b120cb39ff96269a9ecac194","ssdeep":"","tlshash":"35510a7c5b34ac20758b2f9d0a40e450e5f65f3d1538122de64743971e49beaaffa810","first_seen":"2026-02-25T17:59:20.222215Z","last_seen":"2026-03-02T23:08:53.774326Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1881,"timings":{"blocked":1605,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/common/type/defi_activity_type","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3s4ybXtoEULIyNZNJ4zojere1odjwcocYFm5nC9WDSUriUI0u1fW8lFIdoiMvlEPMpDi2H4tRtEyIhrX7xdav18hRe082YW0ZxDW6lJt0vHGNIT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564b7c21f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/4294bcdeb43a48839025d2914cd69f37.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/4294bcdeb43a48839025d2914cd69f37.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425A8B90443939372AF6\r\nAccept-Ranges: bytes\r\nETag: \"BB27C369A3AA54D9C1F8E59E1706DA48\"\r\nLast-Modified: Wed, 18 Jun 2025 15:05:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uyfDaaOqVNnB+OWeFwbaSA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-06-08T12:43:51.945483Z","times_seen":631,"resource_available":false,"data":null}},"time_used":1486,"timings":{"blocked":1186,"dns":0,"connect":0,"send":0,"wait":280,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCe%2F1R9Eh4%2Flts9Zm0HwC5f5Ei4r3O9oXlCN2%2BTWC%2Bej5SBJ29Ev92Ddw6xcZAdmYRT0dfuVEFdBCjeZlT%2BuTKbs5QRL0I8XhAJzBgqmMg80tPMr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bec4ff3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQNzkx2sLpq5q%2BMIR%2B3gtwUKgoxKxk%2Bd6hH6cVohSBo4HwEqnyjH3ZA73DSmhIANeK%2BqR40X7EWEJgz1hOymqCVA4Sw53ydXiNIWnJbaJIk4objY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bdc42f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fV3jTBF9ZOaN06vuAesf%2FcjRI8LkBBA1luxDh3OLsj5pBcMu2LLJGV3RJV1aJ9iJk1VCORm4FdmTciBsN2JtumzQHqRXX%2FTse2hlcq31Gdr6Gyse\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bdc3ef3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:26.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rangwodf.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:00:44 GMT","end":"Fri, 24 Apr 2026 10:59:07 GMT"},"fingerprint":{"sha1":"A7:D7:98:60:01:FB:A2:7D:68:92:7C:66:27:0F:6E:9F:EF:58:EE:0D","sha256":"30:5B:B5:CD:C6:1D:DC:50:AB:B2:5C:F7:80:BB:2E:B0:F2:8C:5D:36:95:24:63:FC:BF:96:EE:7B:E0:58:33:CC"}}},"request":{"raw":"GET /1.js HTTP/1.1\r\nHost: hw.rangwodf.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Jan 2026 15:40:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dy4f7gcJcU2joiPTxaE6r3wZlkNn7%2BRb6JeLvVPWKskpdBu2QUcnE1K77xmcgVxFUEHeFRvdchAmr%2FtVB2gAhfws7LnE%2BxkNHM0Q0Une\"}]}\r\nage: 3261\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"695bdb5c-110e\"\r\ncontent-encoding: br\r\ncf-ray: 9d39563fca804434-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4366,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":44,"dns":22,"connect":8,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/assets/en-ty6Ano5R.js","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /assets/en-ty6Ano5R.js HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-be70\"\r\nexpires: Thu, 26 Feb 2026 05:58:52 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2556\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvGuiX3LF06UZkyLB2pas2A8oivYgJamOqhEj%2FRogzrAO8%2FWpl2nHd1Xpr0djZnh0CneprRTFD%2BH5PbqWGj%2FVVWvB02gfRyj6fwdOdA%3D\"}]}\r\ncf-ray: 9d3956499b50f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48752,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (48293)","md5":"37e00caa47ef41d0c182c28e9757adfa","sha1":"e668a57842ef1a707be4b8d31276d891b5d00bd9","sha256":"122424a150e7fd2705a449b5472db897783a267106199af42e06d35ca5c56ccf","sha512":"25699ffe8a3032740417d6485e6372aecba650a16eb6682741c170bcefb144ebec618847ddff5804fa806e626c52596f602d8625be41de89b0743938298bf228","ssdeep":"768:KGtZcEw/o7rgOY5siqAMnIUGlg2Pm0sPScHo5xJnvunSH:upongOiuIUGlgwsP5Ho5xZmI","tlshash":"7a23e68d7e174c9a05e3633a78ce2a6020f509c18755880f5fecc5fc53e1b67a7a7629","first_seen":"2026-02-25T17:59:20.22146Z","last_seen":"2026-02-25T18:42:10.632161Z","times_seen":6,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCdt9ZPU3gGcwy9l3bjRzF3dVFTV0EgTyJqbLfQ1IrrfSMD26Fdwy1Cu%2BZqBQaC8AosLQrjPx%2Bt2Ql8a09UtD2BN1kH9Z6JhTVZ%2FrnYpF44aM7Lv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564b7c1cf3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/95fbb973959046e49662d48f114487bd.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/95fbb973959046e49662d48f114487bd.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425AACF6C532327C90B0\r\nAccept-Ranges: bytes\r\nETag: \"D5CA5F90C7A46CB88E5F57B2D3046BA8\"\r\nLast-Modified: Wed, 18 Jun 2025 15:06:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1cpfkMekbLiOX1ey0wRrqA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-06T04:02:55.285468Z","times_seen":581,"resource_available":false,"data":null}},"time_used":1699,"timings":{"blocked":1404,"dns":0,"connect":0,"send":0,"wait":285,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"doge\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8ht%2BjbAZ9bB6s771x7Pde9oNzf9RbV%2Fu3kGDlMuFKLPIHxlpe6VUjbakN%2Fb%2Fq7gG49CxfvtYx6Q%2FGhRvBC9KVC4j9KHlHjgZgJv3lnsaympSdQR\"}]}\r\ncf-ray: 9d39564e9d54f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40675,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"75b2416c78b71f088537e42a80a19447","sha1":"65b8541c39b130a668a9a9e8422abe767762e7f5","sha256":"1efbf84458fa879719eea4e27c7194f7576c3ca400355b5b2bcebb04fa8571ee","sha512":"b7530aea9ed67bf25b9c34c6ba4fe652de59ca40720f7f050d3b073cd5e3aaaf7a4f120b4cab2cda167b9291e10da2aaf024ea45373726c42899e7cd365ca4ea","ssdeep":"768:wht3LTbO3egl/wVuuOVuNHHakbihgH4Y1OVrCTab9OeZ5CX+7cKp2I5Uc1KOm2+o:wDgebnDFo","tlshash":"070341344ab49275d433ac866f876eb01426f9d309cd8dc161eb0f08fa41fe7a1997b6","first_seen":"2026-02-25T18:41:54.320227Z","last_seen":"2026-02-25T18:41:54.320227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"xrp\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0TG7Qk5PgY%2BDVt9%2FBZEXjLKLd9O%2BbA88OmjKmvkWgBHTM%2BeWf2%2BzwMHuK3s52y2i9Ykb%2BXvbSSucZrPBC06a%2FoRR1gbA4i047gcYcyfaz%2BwFG%2Fb\"}]}\r\ncf-ray: 9d39564ead5af3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38277,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6535aa401a5ff72a39f3d2f133eb8407","sha1":"42deb5d31b36e40ed12efdcefcab70e0fc95b0d8","sha256":"dbfed51a4a85d8582cecfd00fc551afaef29fee379003a739250039f28ce770d","sha512":"31bc0ea3ec3984a6f7f508db6f0de420ab544549ca46bc87fd5be27a7311c371aee897146456b1b347d17d19a22abd5fda1a7df393238e295b4334dc3cddd661","ssdeep":"384:YaxI26L6BhRxIvvw3ZO1WQu5Vdx3teUVMVncwYBn9f++a5mj/Y2v6:Yayv6Bh8wpO1WQ8VdxdeuMVncwYBF++K","tlshash":"1703a8374ac4d099dd368cc12fd3aee43c3635c3a9de2c617dae4d047ad066ad14a3a6","first_seen":"2026-02-25T18:41:54.322626Z","last_seen":"2026-02-25T18:41:54.322626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"GBPUSD\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUhIK%2B71h5%2BEfaTvI6EMVgJZiLNh0CmhqUrI3xJfcJqHDmELDrzFagLrjfK3DFrAqptJQkFnOEpOrnn5vV%2B2t7TzrGcLxwPnaBIZzNCRHf6F65iJ\"}]}\r\ncf-ray: 9d39564ecd66f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89907,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8aeae29ad92be3097a39f93446069e0a","sha1":"1b74e803c61753372559adbaa049e7b994378f74","sha256":"9d871f79de6fb807739a16120caf2c84f633a47d01c2f123f3c1d3e05491dd01","sha512":"74ed7f5125113dc032e9aceeae289037b5ccc183d0888bf6523300e48f99026fdfef8fc7fb757402061082edb37088ff1a4348664494b4f65fcad3092ad46218","ssdeep":"768:nM3S49jJdFolo4ubOeSmHGeqk8reawDSPRsO+lvuP4qO2Q8DY7:q9jJdMeTmeqlySPeO+lvuJk","tlshash":"a89327704ecbc058c5738cc25f939ed83d2631c6e6dd3d417e9e1825bed866aa00a7b6","first_seen":"2026-02-25T18:41:54.324932Z","last_seen":"2026-02-25T18:41:54.324932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/a428289bcfe346899355ed8bafdeb067.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/a428289bcfe346899355ed8bafdeb067.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzhupXlDcknM9BLNlcGrWnJH1ZlqUkZvMTJ7x9ag2jRNl6KoKap18gCdTkpC2-GtQR_\r\nx-goog-generation: 1745018923182052\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12869\r\nx-goog-hash: crc32c=YamtSA==, md5=pTPuze5aeJ59lPj3n5XViA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 12869\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:28:43 GMT\r\netag: \"a533eecdee5a789e7d94f8f79f95d588\"\r\ncontent-type: image/png\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-06-06T04:02:55.266893Z","times_seen":677,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":175,"dns":5,"connect":22,"send":0,"wait":22,"receive":2,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/4c64ba4b35fe43c196a53ed2bdf6d28c.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/4c64ba4b35fe43c196a53ed2bdf6d28c.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5830\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425A794D10373476C799\r\nAccept-Ranges: bytes\r\nETag: \"19C80C7EFE2EF7877318F929DB9FE4F6\"\r\nLast-Modified: Tue, 06 May 2025 07:30:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1707329918664526120\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: GcgMfv4u94dzGPkp25/k9g==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"19c80c7efe2ef7877318f929db9fe4f6","sha1":"cd7b1fb7411f236a51d618038bfaf1b3712bc2a9","sha256":"2875991b7af514aa04ddcc8af116cf31e47abcc49837d23338c6a164ce56a2ed","sha512":"1639a51bee2f69c0009c5913e7fc55662275d136344c7e97e33de443964c78d69a3f74c2220b1bfa2696c54024d45ebc6d1d9d5a2b9f61a4888204222226b4c3","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/x9tkgNVPydj1FGtxxTAWQrbFe5:gIIHUCD4watNVubGtnEH4","tlshash":"78c1af45ac424825100a4fd26e4afc80cf3c9bd8a34e6a0cbcdd536fdf109a92c16f47","first_seen":"2026-02-24T15:49:18.975104Z","last_seen":"2026-03-02T23:08:53.825953Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3800,"timings":{"blocked":1885,"dns":0,"connect":284,"send":0,"wait":288,"receive":0,"ssl":1340},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/resource/images/light/next.png?2.2.1771519117885","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /resource/images/light/next.png?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 822\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69974a84-336\"\r\nexpires: Fri, 27 Mar 2026 17:58:53 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 2555\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XfHCvw55Kr7L1dY%2FF%2Bnjr5RSbsCiE9c2zUW64X0dBhSqqX4C0jBl9Arlxu4GKjiSqPTcBbiHt66Q741ndOHfNJTL%2BP%2B2W3ufXMjVz08%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564a3b8af3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"56f4c6bd26236cec628eca09228bd623","sha1":"0c0cd20cdad0053d2d88d9b2a9bdb45aa7548bb3","sha256":"bc7f7a772a5fef50a9499daf268bb6f82b915b33c10c2a2cf8afe24ec77da77a","sha512":"fdde6c6101a816389398341a64f8dd37cb4bf13a6392fa0379b5b7889da00c16ae38792f51e8025be530c28ae5ea90842e6c3d7ed43b80db094000dbfd788a88","ssdeep":"","tlshash":"5e0186a5364ef13ef1c3c935e5340364cb3b4c38857c28aaf6d09d2694c0b49719135a","first_seen":"2025-10-12T16:34:39.767715Z","last_seen":"2026-06-01T14:38:39.432219Z","times_seen":97,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/resource/svg/light/huazhuan.svg?2.2.1771519117885","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /resource/svg/light/huazhuan.svg?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-5ec\"\r\ncontent-encoding: gzip\r\nage: 2555\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ui5qxg5g%2FBGc%2FQedWy30foLLQ%2B%2FQxp9R0pGDZCzxZmkjEmr1ovL6wwtLMI1RgPHvZ9dQNA38kCzVSlbkoiXg7Mpz8vewJG3sIwj3ZkM%3D\"}]}\r\ncf-ray: 9d39564a3b8bf3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51866c6797d391d7d5c5dd9943563625","sha1":"cc3462f85fe72a7b640fe06ab0d4d8bd64baca34","sha256":"80d2a3b3349201d02e11cfaeaef9e12b1ef35eee62f9f352a046d802217cb7f4","sha512":"040fee6a46e48e24ad9e28af4529dd2e0f04fbda45ab6eac4ca68943e04ebdd9b85ba734d57362a6cef14d9ff3cad53f0e59e5b0e4c2abdd93ee688bd9dbf875","ssdeep":"","tlshash":"da3123eb63a5c358f689022e8734b4b1399b30c777e012ddb88c781b7f128d10d665d9","first_seen":"2026-02-24T15:49:18.893271Z","last_seen":"2026-03-02T23:08:53.773597Z","times_seen":12,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQLBluIVxHXt8RknuWZKU6cILJjJNf7zPkIsVKD45TUYf2FloCu4ZbIkHL7qR9j8rQxjj%2FtZ4XPwAKHY4FBkSDh5HlfYZc9q7YUpE63YzDhgpFQz\"}]}\r\ncf-ray: 9d39564afbd8f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7942ebd9d609ea408c048733cdd1288a","sha1":"7df81054e919b525b2a46404a34e356ebc8b874c","sha256":"8b8dfeac537eb042952c56780fbd715dd4b8395323fc0f1fcd5e7e0445069926","sha512":"4d85895ffaa6d2294a6a7e5244c124dbc15f63220d7b23058df039cf28d91d16b00bfe2dbbe33bd8418e818a4f03df78bea3000366855f52331f3a52a286805f","ssdeep":"","tlshash":"629002555c188242a88348a59916560400243160262492489c595125828c1726040858","first_seen":"2026-02-25T18:41:54.330452Z","last_seen":"2026-02-25T18:41:54.330452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4%2Bj80kfyL7KkCvwZv9pN4pgbO86PAljGijGvL%2BsroENO%2B2oS7Sg1iD8GEaEHIA3Y%2FFa3uo3WhIXEUg24OphxtTq6dxCaW%2F19xtz7NKzZrWE7v%2Bg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bbc35f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QghzbzRsMsAEkGux9BXjBTo6Xnh4EylNH8XezUdc3KWKkhjrwt5eXFV9rydDoc8q4z5uHw5DuOIOJmwnbjUiOAIZqiK4kaiBRshqapGSKJzK5uIx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bfc53f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/notice/getAllNoticeList","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6x1rec0eO1HCdkfQsaQbIf2Oo%2Bv9c2%2F%2FKbOf%2FufHQsQFrNvpUrCFk2vlJD%2FnQI89D4oxpckrPuN9%2B7DrRKAPWeXnrjXZLW3Mg1%2Bd%2B07LwZ%2B1hWGi\"}]}\r\ncf-ray: 9d39564e3d35f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1680,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3ba99a7d20fc71a4ddfcc01354aac5f8","sha1":"0c47a0a7ef467750ce0e2e74c6722119994977b5","sha256":"fbdb23149624bf7b05ca34474eb3fcc7775d8253b1c04f4280afcaae332ec66a","sha512":"2f6502aef11994ce0f9bc09c5dfaefab10e8436a35d7ead15ccec17f7b6705c8f6b8a058590c08041dc17f9c11e0d91261485d7d0a7bacaf3ecdecf59c0166f7","ssdeep":"","tlshash":"b231a60e15788e79091588cb25dd7dcd9aaf1687d660cd30966bcf2c82f59bb1f2b208","first_seen":"2026-02-25T17:59:20.21668Z","last_seen":"2026-02-25T18:42:10.650006Z","times_seen":6,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/4c48ad4889d7422e9ac37bc128ca2bcb.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/4c48ad4889d7422e9ac37bc128ca2bcb.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyhTXOuolBo-cwy7rNq5dWJvBSngebGswiK7zURZ7tsUxya3djJt2nFcI-rvcXMS2ta\r\nx-goog-generation: 1745018951660884\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9807\r\nx-goog-hash: crc32c=bTyaFQ==, md5=EtlyJGF1nO//AtkHaj0nGA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9807\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:11 GMT\r\netag: \"12d9722461759cefff02d9076a3d2718\"\r\ncontent-type: image/png\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-08T12:43:51.926272Z","times_seen":601,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":30,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/assets/index-i1ncJbtk.css","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:26.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /assets/index-i1ncJbtk.css HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-89569\"\r\nexpires: Thu, 26 Feb 2026 05:58:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2558\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TFS1mVfx4dzrid7Q1n108rtlHqQBXWSOR6Q6EP2wA6qU6Fu2MujbB83A0d%2B%2FRE4M01TEQvjihyYdBuflYbwcYa2646w87TKpBJehym0%3D\"}]}\r\ncf-ray: 9d39563f6f30f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":562537,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"9b22f666195d1354eeb1525b94e6aa08","sha1":"0ab996d973b385289d6d87c0c3dc9e50d646546c","sha256":"fe1779e568fe5653603ce8e0d384fc9dfa65cfdf23684e8d90d8ce91a5b22bae","sha512":"0817126df483b753aaec59fcc9ed45e6fa7d8969411367683944810d47a91f4e898eef7f81b3741035b3e2350001f016d34d8d2d87df6265a8edb0bcd76087d2","ssdeep":"12288:GB/NJNZ8w71ZACkFDS3vyf58rBeV05TMChXTUX2Ul+GVU37P:GB1JNZ8w71ZACkFDS3vyf58rBeV05TMw","tlshash":"ccc4f969b184113d6e37d5a96bc99acce12cfe61cc029ee4f243551a0ec7bf7232161b","first_seen":"2026-02-25T18:04:02.19033Z","last_seen":"2026-02-25T18:42:10.649437Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.saltuspro.com/ws/b7824b3f-c380-4448-b1ec-65d7b5cd3d12","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"172.67.165.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:27.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /ws/b7824b3f-c380-4448-b1ec-65d7b5cd3d12 HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://saltuspro.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: o7orZqmsj7BlcElmwkfc+w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Wed, 25 Feb 2026 18:41:28 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://saltuspro.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: uCtHOHALVMSGdMWIcTEYq8xhGqw=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: server_name_session=602f1efb140727b33ff1f607f8a596d4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CVIVeQifC%2BORYeY6wmarCdJS72F2o%2F37N5Pw4hE8TH8MZMdrgBU3WTCn1%2FI8uqL6pOXfsz46bQHz99cRwzw53oBMBIxJZMkkOiYSRkEyYd01gJpSV8S0eN2eVuPbPKYiVJZCgB6Wlg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d395643af623f45-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7866\u0026min_rtt=7826\u0026rtt_var=1678\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3116\u0026recv_bytes=1198\u0026delivery_rate=551478\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=f8a1eb1018128a9a\u0026ts=439\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":0,"dns":45,"connect":52,"send":0,"wait":425,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/common/getCoinList","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"172.67.165.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhCXx3soDltr1%2FQKzGEOedTKoK1zgTX%2B8iiXj29nBnItUBjP%2FV2VPSfGVOCLub483LjE7MYDmelaUi%2Bsg4XzUrsOK9QuvGLsZ5u%2FiTbpwbhjELW4\"}]}\r\ncf-ray: 9d395646feaf97af-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18266,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"686444bd00bdd10fc3de020ee582ce48","sha1":"240712ab885f24dd6744c5eb380cb9ffd56db12e","sha256":"b0c3b2b97e4d5c128ee0c785c56a154cdde6f0e93be104bfc1a4edfb03aea475","sha512":"2d96c739b4f9e62b42bfb64aafcf95e32d9b36f04c4be30ab1ee4c4b4bb8098dab8b5dacd5655ce2492fbf40aba4f8f0cfb6f9459835418df7e62e90352d52bd","ssdeep":"192:tX+h4ZXE/SXoQ4Xd2GXLOyX+q2HxLuXJGjjSslUkf7AkflntfAkXgu1kjmg1kcwZ:PbhlVUtSaqUPnASgZLhZsBh4eHaO6n","tlshash":"f0823256622c947dc57ac0e11e7f3e53119d352fe8c58e1ac3de4d88ced8eb1690ab06","first_seen":"2026-02-25T18:41:54.335844Z","last_seen":"2026-02-25T18:41:54.335844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/e2b94b5081a24efcb690a064ad3499a0.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/e2b94b5081a24efcb690a064ad3499a0.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5215\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425AACF6C532323290B0\r\nAccept-Ranges: bytes\r\nETag: \"A39B38C804F68E8BB5C14B3C1D278F02\"\r\nLast-Modified: Tue, 06 May 2025 07:33:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17479048048356646519\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: o5s4yAT2jou1wUs8HSePAg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a39b38c804f68e8bb5c14b3c1d278f02","sha1":"832fd79adeea0d14f5e8e7828eda4e7668bd5176","sha256":"2c5efbaf1cc23d5d2ee2915826e9ae93d7f9f583d026a5e9e8b3a6e41917a24a","sha512":"0bdd3ce70e85fcfbf788c66f72f5fd95f2d8bc61d6fd8809a35326bf9ace337cddc95b6128e80b6a13e922cac42b958205c5cfd1d02bbd34d9fbf339661cc987","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/x4io1tJB+AokL0eX9ZhWdM2S0d9:gIIHUCD4waOL1/BFPzWdR9","tlshash":"65b17c89a8020b990a0943d47d67ef42cd1de0c0824a9d1d89bd42aecb25c423c7eafb","first_seen":"2026-02-24T15:49:19.003159Z","last_seen":"2026-03-02T23:08:53.81893Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1629,"timings":{"blocked":1353,"dns":0,"connect":0,"send":0,"wait":275,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/68fffe9ad4cc4a3b89b6935e46fbe4d5.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/68fffe9ad4cc4a3b89b6935e46fbe4d5.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425AAB67323436208483\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Wed, 18 Jun 2025 15:05:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-08T17:29:55.947136Z","times_seen":21674,"resource_available":false,"data":null}},"time_used":1427,"timings":{"blocked":1149,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70seSkxog5byehR23BCmvZ9iaCRquv%2Fs4JJBU3Cp433mHmwTHG4%2BjLto6jeL%2B8JhwEQ8W2QD6Zo3G1K9ukh7P9IXEbdrowKnt6cDwmelvJrBo3EP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bfc57f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJo1F6fxT0%2Fitm5AsuMww9O1KigCTXMBEdGDATalMjax4VWopZm3X6cB0HTtXHQ32hKdS%2FuYbdqpFBHnrlROVJ5%2FjdTiW%2FICxxFXmwZpXP65V3RU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564c0c5bf3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/b6a414b3b0e749cb9efb1021dc8e42d2.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/b6a414b3b0e749cb9efb1021dc8e42d2.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyTrKNYQXkhZSjFXLN7rieSWTAxTmac09YV5obijjn9n_zCBberYuMWsrSOHC4SJzdv\r\nx-goog-generation: 1745019003474375\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 14268\r\nx-goog-hash: crc32c=1eE/CQ==, md5=XZj61ZeWnKYLLBULcX11wg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 14268\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:03 GMT\r\netag: \"5d98fad597969ca60b2c150b717d75c2\"\r\ncontent-type: image/png\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":14268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"5d98fad597969ca60b2c150b717d75c2","sha1":"f64fa05a8ddc3ee085768f308db5bdc1fa45dd6c","sha256":"47373b88482223e17220c976db2859b2ad928c0a8725a81a859371ca1e052a81","sha512":"b0ffafe604e293786aca6a044f6147651d117b31afa201c051689b499e25ddacde63628be24e98a99b55aeb67676d6121c182443367789b05f9535c3c2aa0231","ssdeep":"192:FNYSd3bjNhYk+506I3KsuOr/iYmT67DVDbnbQD8/QiXSXfV/+7wDlb+St4:Fhd3Nh06/iYxDlrbZ/QiXw1JDlb9t4","tlshash":"9c529e5ccc41dd1d910a2a35d37c29f0892290bb230ad0133a8defd5b3993815abf55b","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-05-22T19:23:47.182691Z","times_seen":101,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":47,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UVbpBEk%2BRUm77UkKv33O30WwJfJwTM3Yw30tc6BAe00vhh7y%2FuYW7ThDo8h%2BTS99sPIGtECoYEbWPqciamMSQ18K4ELEUoheYc9kpAJCSt4U%2B8%2BR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956498b40f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/15fb14dc57a545cea5ba3eda096a6d5e.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/15fb14dc57a545cea5ba3eda096a6d5e.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4957\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4259794D1033308BC699\r\nAccept-Ranges: bytes\r\nETag: \"7762F0C5570CA50D67C5EE196BAB4505\"\r\nLast-Modified: Tue, 06 May 2025 07:31:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17015802455317525069\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: d2LwxVcMpQ1nxe4Za6tFBQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7762f0c5570ca50d67c5ee196bab4505","sha1":"2fe35984f7483bef4f641be10ab686a6f3372752","sha256":"b581dc65b94e2037a66d0875652b6d16c1326af7b0fe0c0aefb3e9eb2dc46052","sha512":"bd63df41cb4dd411b0964c20c25e9879e5edf3692dd44b4dc93bf6ef6c6273b02b892c19145f6e3942d722d257d4bb2032ad387000f93c768dac603ce8d07d88","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/xgx9FTrKk1Ad8NvrmPtgO2:gIIHUCD4waq1SNdUmPk","tlshash":"80a16e47e418426a114e094f3a6f9a8541fbd595f3949a2ceceed25fc710c02387c7f9","first_seen":"2026-02-24T15:49:18.916724Z","last_seen":"2026-03-02T23:08:53.786779Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2459,"timings":{"blocked":1093,"dns":271,"connect":272,"send":0,"wait":275,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/resource/svg/light/dui.svg?2.2.1771519117885","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /resource/svg/light/dui.svg?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-68c\"\r\ncontent-encoding: gzip\r\nage: 2555\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24a7lBzy0N6HOIAUCouzhifHOe8H0WsLPH4%2F%2BknHscDoW5cIZrV3PXbUvrvTIiEUEj9tZpmuKRYFlGk7XSROFNiEoj2wJYoubVE2QTc%3D\"}]}\r\ncf-ray: 9d39564a3b89f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1676,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee023bffa0055002f556cc29349f904b","sha1":"a4590d6441adcf5d66de23aac549fbffc4b31870","sha256":"5647a81837840cf674bfa7e414c7c710fdcd8e0368870abce060a0098cfe4b45","sha512":"498258be0735f44be700d37eb9435a681695041f8397d0bb80dc526b0177b635f2c03f3e07690348937b9ddf4cbd6fdfd410ea7d9be17445b2ea7ebe40a435a1","ssdeep":"","tlshash":"a83112da63a5c344f649022e8778b4713d9b30c777e012ddf89c791b6f118d20c6a5da","first_seen":"2026-02-24T15:49:18.895618Z","last_seen":"2026-03-02T23:08:53.760066Z","times_seen":12,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/e6acb2e3e17f4e97988f1c0373b69068.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/e6acb2e3e17f4e97988f1c0373b69068.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2460\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425A794D1033307EC799\r\nAccept-Ranges: bytes\r\nETag: \"50214E950B83229360441C2881DEBA06\"\r\nLast-Modified: Tue, 06 May 2025 06:44:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6991071479212585411\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: UCFOlQuDIpNgRBwogd66Bg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"50214e950b83229360441c2881deba06","sha1":"70f0a00b8bb3eaedfc021e65d9ce9f38482576b8","sha256":"a14dc1617b41b6343ed713bb96dbd300dcfb0ab8e4422dab3a00b8a032ecce25","sha512":"3c5b5ebde5a2be75aea545928cab45db393d4d572c76065dbdc9e8d3ce77c58ebad1a28da9f20b1e9e572ccbc5cd1ec87e6031ff35b019fdb31681b058a7d4e6","ssdeep":"","tlshash":"a451a74417154a7c2f4d1716b20a7a32ca1945831809bcbeddfc99f1eb7e16a0a43927","first_seen":"2026-02-24T15:49:18.984537Z","last_seen":"2026-03-02T23:08:53.826566Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2144,"timings":{"blocked":1868,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jbx32EFgO7YJqeu9305U7ZoeJEcHZtblaQZkoGSrGrkleTpLI%2Bfgt57qN3dwNK%2BziAxNatf75LqLdwSPQml%2F4E8a%2BAqlXniEzAJLW1aU1WIJZQKt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564bfc55f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jyn0FcGPrhrxubGGO6%2BWSHpdzO7Fp%2FBURk0oWK5i2e2DxyV8EPovtliM7QSNiwcK86aU4wCcbMhq%2FwuwBg8wSTrvUZBuSoNU%2FY6L%2FHWFluU8WCct\"}]}\r\ncf-ray: 9d39564e2d28f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0b231d38a76983def42635d340779a98","sha1":"a0457d5f1b0dab07084e3e03576050ebd10b9bd2","sha256":"a8ffcd75e93e65434ce759dda579dae4c3eae98b2899add913e5116baeb1b0c4","sha512":"8b941f7f85a50cc04fec74e6182cc42fb4fbf381dba2ef78a9b2ddf054429c3fa35689a1bf3c581355c4e47d8a918b22bbf535cad1cd1d2d3e52068020fc0b5c","ssdeep":"","tlshash":"b021bb1f253c8d790d1489db64da7dcd9a5e1a47c6608d309667cf2c81e48b71f16108","first_seen":"2026-02-25T17:59:20.183978Z","last_seen":"2026-02-25T18:42:10.675141Z","times_seen":6,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"eth\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VqRsC4AtsKmwKfRvOasOacIDMbPnVT3GmxDihO9odeD959xZJVI5aKRPAuhz0T83SFy1Hf83kyyK8TcBkPSaciBqxG1VoAITcKB9JFm%2BmChwU3qr\"}]}\r\ncf-ray: 9d39564e9d57f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40426,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"08fa156bda13cadc73aa494a970d81a5","sha1":"499493544ad6666783c9223fc0b4026e7f58accc","sha256":"4b8fba563ece2fcd81ed24dd2695866a6f142d64b8c6145921de8ac4752bc0fd","sha512":"aa382efda7296c3c6d8354951235a953b9fbc5467d7786eefc644c005ad8b66de92d78c7fde9ad00631af1a1cf461d2413bf45645d79f717d070fadcb672f2d6","ssdeep":"768:ZoGs9TbaRN3avSiSWigx67szfj07Xmm7VmqdEcOvhZA:WJgjuLz6DZmqdEc2ZA","tlshash":"f70332314e99dc4dd8378dea4b9bece40d3233d347deae6155ab0511ba8026ee40d7b2","first_seen":"2026-02-25T18:41:54.348007Z","last_seen":"2026-02-25T18:41:54.348007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 67\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xau\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=60d%2F6KGaB5ULnVuc6YOILrRW4j5vPq2QzOhz7fKvjEkA0uBHBhkGqqrV122n8Q8gAPW6q6btZ4DVFJtEby2jNgfHGJK%2FGYhwyVtk0KbMpqZaeiqP\"}]}\r\ncf-ray: 9d39564ead5bf3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96637,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3997cde3e07e2a43cf3ba592341dbfab","sha1":"b60b5f482628779267b3e6c839a99defd73afba7","sha256":"ce37566d991b1dfc948d81af5569d80949186e3385a9c3933a165eb11f321dbb","sha512":"a2e6ea412f4b496959800ed07b98dfd4d73377d87777b0aa869ab20995b16c72fab6f06b8f5e391440d6d5a6dca8577bec166abc220cc16a07b082ceb909c021","ssdeep":"1536:oGAzZBtyNn72GzjAW637//TVoqxVb21oIWk7rnEjtjPTGEsGdHvZP6/qQrv0tiT:o5BtyNnqGzjh6jTVoctlk7rnEjtjyqd+","tlshash":"76934af10a5aa274d432acc71bd7ecd08a2773c359ff6d9141be20142f94ba6a3553a3","first_seen":"2026-02-25T18:41:54.350777Z","last_seen":"2026-02-25T18:41:54.350777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/cab6a64eddcd4cd8a9d0b8169d224ea3.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/cab6a64eddcd4cd8a9d0b8169d224ea3.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4989\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4259ACF6C53232D68FB0\r\nAccept-Ranges: bytes\r\nETag: \"2EE0D2631C2CD525161EEC1B65806391\"\r\nLast-Modified: Tue, 06 May 2025 07:31:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16726134395162458962\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: LuDSYxws1SUWHuwbZYBjkQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4989,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"2ee0d2631c2cd525161eec1b65806391","sha1":"566b73767fce75cec494a9b97dfbb9aaa7cd8cc2","sha256":"805a1da5c909104e856f76b95955617a8c4155db013cb971a4f2c0a6cff74279","sha512":"ce281fc21c17e68a8c29e7e16f11b7b396e0c29f5b5d95e42ced58bf29698800d2303c62214af0d86832ecb62eb3a8bbb1a5c1d3ed9cc714ca83b96820f38adc","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/xVJRz1/G3Z1Pg53bTOAlnawjWv4JRJbnbqs:gIIHUCD4waL+crVZZWgLdGs","tlshash":"42a17ec8a86086ae140d4aca3f6bea1fce29654503ae7e6cd5ac530ec621d003d25f1b","first_seen":"2026-02-25T17:59:20.199737Z","last_seen":"2026-03-02T23:08:53.818291Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2186,"timings":{"blocked":1090,"dns":0,"connect":274,"send":0,"wait":274,"receive":0,"ssl":544},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T18:41:26.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Feb 2026 15:28:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca; Max-Age=86400; httponly; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B66GKOIlH4PJ8HGfRaPJY%2FepjjBEH1Wg47WeUOnEwFsKB3uOZqgLKxEHsA%2FSFAp5CZuDPR195r9GZy7M49CywJ8sbwnjrUPdkIWbqxQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d39563bfefef3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7711,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1159)","md5":"b8fe561a653fe32f636c04b2fc45ab02","sha1":"9a796589c759c07713d4a294040714b3049949b3","sha256":"db94bbe242c86cce883853fc77ce0c7dafc0975c1051b64c6ecf3c519b833ade","sha512":"2db55f5803b77503c4332e9925450c25324d2716c2b0fa804820f82e0cc38e5cf5ced779f22f998ee5115766956739bdee1b35f507498b959e734155a8cef86b","ssdeep":"192:TFDXUMUqRGqWK1GOiUm9Al6BIcKZCxfu2nftZb9LuB1Xi5ifffl:FsU0pebZCxG2uS0f3l","tlshash":"b2f195a76df195292393412aabebf0046a309143865edc94b9dc54ee8fc1fd988c77b0","first_seen":"2026-02-25T17:59:20.233471Z","last_seen":"2026-02-25T18:42:10.655559Z","times_seen":6,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":70,"dns":45,"connect":8,"send":0,"wait":414,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/assets/index-6rCwyYpM.js","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:26.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /assets/index-6rCwyYpM.js HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-7061a\"\r\nexpires: Thu, 26 Feb 2026 05:58:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2558\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EjB5DczXwd91skYEAKdQP7sMeyL7Geglc5JttNaUB%2FqhfOsOtTd6kPThurr0W9Qf54lVJwJ5bO9hSSuUK7hyG5zVkfJBntnqj34bPT8%3D\"}]}\r\ncf-ray: 9d39563f6f2ef3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":460314,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65165), with no line terminators","md5":"5287ca0b10c03e9fbc8736f84ec84b61","sha1":"7953dee69c4fd16c3acc883023d7315ede52ef63","sha256":"81de3bdb891144705aebe55ea80f7f993826c802bebbc22e02d5a7782a7eb025","sha512":"22975612d47c0cc69d47b88effeddbf1f7563b7d4e9882dfe2480d15c7885417b4504767a0c4b2aea205f20dc209a31cc1b1e9cbca0cfda69549766b95070acc","ssdeep":"6144:ejUolI4Wx7Qq9P7eXLQoJ1hHGylBM2KkNH+vV:ejUoS1QqJEmcBXKkNEV","tlshash":"6fa4e581f94aca7debf7a464509d2500324c3fcad00889a6f6fd9d062756db8736eb34","first_seen":"2026-02-25T17:59:20.249047Z","last_seen":"2026-02-25T18:42:10.635044Z","times_seen":6,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCiWiqCFgt3gQyG77hQYYpMDDqIeO569RgYHHD7zfuXwokEq4q5cQURCymNJPVWx2ff9yBIxjkFVXLi%2Br7Ujzl5zCe49bto8y6sc%2Fmzh%2BIu01D0a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956498b42f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/48f4e91a76aa4e0f96519eb9e18bc1d0.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/48f4e91a76aa4e0f96519eb9e18bc1d0.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5329\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425A794D103330E6C699\r\nAccept-Ranges: bytes\r\nETag: \"1E9A93B14DEB324904D0A1DCD1232D1D\"\r\nLast-Modified: Tue, 06 May 2025 07:34:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5021727362936346893\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HpqTsU3rMkkE0KHc0SMtHQ==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1e9a93b14deb324904d0a1dcd1232d1d","sha1":"31ed5212c328683ea84d099dcacc3dda9879c7f6","sha256":"64c139830f2d1bdad85e09e51fa8c51da8dd43b9b53466ec74aef0d5f7976592","sha512":"fd552a917e0d0cad7bf99e27bc5c00831f90bd1742ab269d149eaed4ca771662d7314f19f8735bb5179e274e43b8d8961bd0a0ce1f0efe9fff6ec3e2f6459b9f","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/xdLrAyAMC0256B2r0gjO9wjybzXBYW:gIIHUCD4wavpAMCVoB2fjcXT","tlshash":"0fb17f877801481a390906ad753bad438657d70e735abe04d5fe520f8b41a22ad3e38a","first_seen":"2026-02-24T15:49:18.976077Z","last_seen":"2026-03-02T23:08:53.787499Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1634,"timings":{"blocked":1353,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=90184d2b4c226caecbe51d77f31acab4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ihDYxxzVJQgJ7z31nup5FygL78ZSJl5C4j0g2gfQQgu57ArYU%2BQm2ASRac05o8PPuZiKFI167bZ2Gxr1Pxo2m0G%2B70by8FH75N2sxzXHnZ7lfX4H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39564c1c6bf3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/kline","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 67\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xag\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2GaWC9d72xkC25QSdplOrFJgqGx7MYAbkok%2FayQuF252xjIA0fQrQtSuSt44Aom9lrgLamsbGxEpX3b018by8nv9emtA19zibmL6a6jpuJyCNfxF\"}]}\r\ncf-ray: 9d39564ebd5ef3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86022,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"60a1ce8665f49d5f1530d42843397cac","sha1":"7d0e0d5056009c60d2a1ce2bfdbc3066c8aef3b9","sha256":"0e3b47bce7e3b3581ff5743d155dcf3d30c7b2785861d48fadf6dfabf20f3d1c","sha512":"bea9e9da359847449f9e22dbcc260f9e56406ebf122bd5589ec3758ad1d03a0047fa875dc6edd0d36a41a3bf6a25697b685658c17e0fc20c13fe24126319a7d6","ssdeep":"1536:Up5Q88GCFSKOYphRF5sC8ZkOCixAgLEpDHAu++0w2YHo7SOYF:g8GopFphRgC8Zk2QDgu++N2Ko7SOYF","tlshash":"518338308b998088d4364df66bf3ade149b335e74ecd1d05c59e54003ad1b3bb92eba6","first_seen":"2026-02-25T18:41:54.356602Z","last_seen":"2026-02-25T18:41:54.356602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/9669976d5d024b4f9ae92d2f01118bfa.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/9669976d5d024b4f9ae92d2f01118bfa.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzeKxIZm_UVirG0M_3SaW4t3SBpZ9_qhO5OcXPtDjqszo54-ngct0RnE4CUl70YXCc3\r\nx-goog-generation: 1745020353527348\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1265\r\nx-goog-hash: crc32c=gdb0vQ==, md5=6FywUDRdYn4/40KqFOuhxQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1265\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:52:33 GMT\r\netag: \"e85cb050345d627e3fe342aa14eba1c5\"\r\ncontent-type: image/png\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"e85cb050345d627e3fe342aa14eba1c5","sha1":"966c36a1be038fd0bb9673e455ff3b6188f47453","sha256":"e9a792d1a596130e30d7b945e466f2691a563090f1ef06fe06fec57d7193e0e8","sha512":"3c97550a30076a06c1c785192fae5a5fcdc73aef866a69df4c5c4c891f35add2e58f895c7d671faec539ec3836898283385311e7479c7f4ef9ba7a6dd65893a7","ssdeep":"","tlshash":"0521b717faffd94437722d83839a85aeb07726082e004809345e49c5ec2a8885ceef44","first_seen":"2024-12-03T23:58:43.646323Z","last_seen":"2026-06-04T15:28:13.463069Z","times_seen":116,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":119,"dns":31,"connect":23,"send":0,"wait":52,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/assets/vendor-mwVb00cY.js","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:27.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /assets/vendor-mwVb00cY.js HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-22ba04\"\r\nexpires: Thu, 26 Feb 2026 05:58:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2557\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DiF2dlcbM9c6mdmyK8vkuv1wSDIs58BV4krZC6vhKnMiVp0dtt7092rav%2F3HhxT8XDiQfNFT4Ieg3HfTcUB%2BMlfeK2UYhGbvzk%2Bg46U%3D\"}]}\r\ncf-ray: 9d3956408f99f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2275844,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"df836c6a7fe4ae05a827c0a47186a55e","sha1":"497bf5f216455fe55bd1e1c9ad4e0034ce96a864","sha256":"ac2d4f77e7d38da79bd71d54aa856a8396916685e5d773c221223ae2941564be","sha512":"0008602b421ea65014d342a5d6326581381ca1de08da9138cfdc8f9bddbbd12b665bde048e4bbc660e324a4ce6d86517e4a5c8b22dcea296b6d4b1dbacd4c984","ssdeep":"24576:2qcTs1zrW/mOcMd4hRGhuBgcuSros12vsG/5IHjdOx:2qcTs1zrW/mNMd4hRG1aos12EU5IHjdi","tlshash":"49250ad8b291b03543a765f5007f050bf33a6919740e85a8f269e8da7c7d44ea27bf38","first_seen":"2026-02-24T15:49:18.972303Z","last_seen":"2026-03-02T23:08:53.766035Z","times_seen":12,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/platform/mgbx/favicon.ico?2.2.1771519117885","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /platform/mgbx/favicon.ico?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:28 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wt7iwZ%2Bl2qXGK%2FJxu5tcAAAM5spG8GavQz83XC9T2x9dt85ghgHuvzoPtItc4mqAeOvjxcOCDZTSnsvosN4NtnCiGTM%2FJqDOPiji2aY%3D\"}]}\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 2555\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69974a84-1842\"\r\ncf-ray: 9d39564669f2f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6210,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 240 x 240, 8-bit/color RGB, non-interlaced","md5":"19b29cba287aaa488b3d72273b33ba6a","sha1":"a9a16e2a0368551a9359dbb9e5bc642c29802966","sha256":"85597217fc981e9f72807ed790cce1e5218a53f2c2e08c07452ca2042ede57d3","sha512":"fcc066306a22ebf6998a15889a85c82dfdb06773802a193352c7d454998796c341456bb3f71fcb1a6e52ce9f2e67621d06428ea0dc7ae9e6cca9a5c35a494eaf","ssdeep":"96:0k446/M1MnWBIvOxXd8rOun+f17LcB4K9litFQLZ/SUWgsV8DE2p8KVLZ6:0LWibvcX+qun+f1fcB4K/ituLZqrIjw","tlshash":"03d1e599052ef060c0ba47a7bf72dbda711a6e849750dcc3e23d424cfc9455aeb38b50","first_seen":"2026-02-25T17:59:20.204446Z","last_seen":"2026-03-02T23:08:53.78607Z","times_seen":9,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.com/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://saltuspro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=233a325e229455b1cc8447896269d8c7; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NyktQltAlNUsdseyGHtVdMeaSOCjhwKWcSRDErMtSkowwRWQM1s9H3IYBondJFxkPBnXkuIsDNEYp%2BkxYsC6lVBmufat1qWlyTtQ0pfj6e6vazs\"}]}\r\ncf-ray: 9d39564afbdbf3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fe8f9b04ffc7b4ccb6d6f41f8d89d644","sha1":"c5c503c243a73d2b5c7e1049240910d0f82cbda4","sha256":"17afc2e94df9d4a243625d511fc2a689a4e42189cdd86ac2967c2cd1236bfe47","sha512":"4f779c86ffb16d2e3b9404fb149d37c9a166548d423f9a217f7989f6eaef8bf22075ab0a171677c717e867be127ea7304f31477a181397e63497be005a6d6988","ssdeep":"","tlshash":"d39002551c588242a88305aad5161204002471606a25e2884c595225808c1722040c9d","first_seen":"2026-02-25T18:41:54.359594Z","last_seen":"2026-02-25T18:41:54.359594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/42d7d93625c842a6a0b8c054ff8e7395.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:28.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/42d7d93625c842a6a0b8c054ff8e7395.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 55728\r\nConnection: keep-alive\r\nx-oss-request-id: 699F425A68F5793130F40958\r\nAccept-Ranges: bytes\r\nETag: \"48384A67185DBDFEEF3AA43C99D3319C\"\r\nLast-Modified: Wed, 18 Jun 2025 15:06:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3192987439189544564\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SDhKZxhdvf7vOqQ8mdMxnA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-06-06T23:47:44.168837Z","times_seen":643,"resource_available":false,"data":null}},"time_used":1515,"timings":{"blocked":1194,"dns":0,"connect":0,"send":0,"wait":289,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.com/resource/svg/light/notice.svg?2.2.1771519117885","fqdn":"saltuspro.com","domain":"saltuspro.com","tld":"com"},"ip":{"addr":"104.21.11.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:29.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:48 GMT","end":"Wed, 06 May 2026 09:30:21 GMT"},"fingerprint":{"sha1":"DB:0E:A5:A0:EB:08:86:09:0D:18:1F:B8:88:0F:D8:FB:37:4D:DB:D4","sha256":"92:31:53:19:8D:93:E7:DC:F9:DF:A3:E7:DA:F6:45:D6:F6:DB:84:E0:69:8B:0D:70:FB:26:BE:B9:59:30:61:89"}}},"request":{"raw":"GET /resource/svg/light/notice.svg?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e9adcf65e992ec2eeabb83d4756531ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:41:29 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XfkdpKknH1d3fFB7M863hewkCxOkBYCohCfycBrrwmkeq94p43LM2Nc92C2cEeNUYbFpkAXXMe8Igln5OfnLD1ZKiBNsP%2FwWbEFaphI%3D\"}]}\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 2555\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69974a84-3e2\"\r\ncf-ray: 9d39564fddb3f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e399bf50254fa4b12e8a0959d171d0ed","sha1":"f45a07a56d5901357826ede835840a6a700209b2","sha256":"417f5f8e092161317f0e5cf2c41082a699ff951521208adf625391363ef2a31e","sha512":"e3b97813d6e0e1cfd57d4fb580b54a6a2e249059e25a750c83dfa3346a6bb093fa35ebe32d87b6321b4bff91253434071a14796ba3f2cfe3ec195ab752f9a288","ssdeep":"","tlshash":"2711eba8c249922c9164a38eb9788941c818608775d0dcbda25d2d944b328fb6f985df","first_seen":"2025-10-12T16:34:39.877907Z","last_seen":"2026-03-02T23:08:53.825297Z","times_seen":26,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AGQBYWyrxOTlHMEqFLk71bBwCa-Sb3TXcdKVfGUcWwsPEBqfIt1iB1NdHX-6R-6sfPikaVnf\r\nexpires: Wed, 25 Feb 2026 19:41:31 GMT\r\ndate: Wed, 25 Feb 2026 18:41:31 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:11 GMT\r\netag: \"908f16320a0a32c8117ca943c2aa231c\"\r\nx-goog-generation: 1745019071782236\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7196\r\nx-goog-hash: crc32c=tCfjHQ==, md5=kI8WMgoKMsgRfKlDwqojHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7196\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"908f16320a0a32c8117ca943c2aa231c","sha1":"b49e31cd823528649adf1b0fcab343e4e6055b33","sha256":"2a03254b988fdcf3c84ae977a221b83ce9d10f896b0ec508fcbe877c22ad9161","sha512":"531db683a9c449a6d0ace9b1e73a6bd3561c54d71f0421d4255b9698d7bd12c74779b7805cafcebd0fd50c437c64f29d6d761af58e57fa57874b7df5cbe1c06c","ssdeep":"96:cmO7bsMr5XAG3VBRynGlNqbRuYrkVkls7VOZ1d3AHI1K9v3Tv9Cre:0xrqGlanNbgYoWelkyZCre","tlshash":"8de19de8986016208ecac5f0598578a3d4f893cabebb7e4a44896e01c6555ad3f52f34","first_seen":"2025-02-06T02:55:20.514077Z","last_seen":"2026-04-07T11:52:26.924617Z","times_seen":91,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":388,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.187","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.com/","date":"2026-02-25T18:41:30.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWz6WdjiTDo5exN3Mjr66A8eXRsbAYIYgclFYDMtbx1sdCSg1aFHMUKXlXUAiMzyhePq\r\nx-goog-generation: 1745019091846695\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7177\r\nx-goog-hash: crc32c=KbQ4+w==, md5=umkw+KKOd/Vlmi9C6Cp6zQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7177\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 17:58:55 GMT\r\nexpires: Wed, 25 Feb 2026 18:58:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:31 GMT\r\netag: \"ba6930f8a28e77f5659a2f42e82a7acd\"\r\ncontent-type: image/jpeg\r\nage: 2556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7177,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"ba6930f8a28e77f5659a2f42e82a7acd","sha1":"a8486aa615dcb5fc601f66289b55a5cdd08cd8d5","sha256":"8bf7252f758e4f74fa910c3f1935501125d6589f26e2e2c8f397b3ae6ec0fe53","sha512":"35ee8e31b81d5474c5f1178161d3f908139b65e1f33bc30db61618cf0d4555bb38d0e7a6ffd06d7562ca41f51ab216b37320bdb29a968c891badff668a924051","ssdeep":"192:BnyBvvQqY4kabfz3lryvlFnkmnXGCvY1JBAQ9:By5JY4kabLZqFkmWCvKBAM","tlshash":"64e1af75df14718adbaf951d0e9e4440d2961a4a5cb2c30ef10c7de2eacf422531e836","first_seen":"2025-04-17T23:40:09.002327Z","last_seen":"2026-04-07T11:52:26.909048Z","times_seen":88,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":56,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}