{"report_id":"204efd06-9561-458a-b77f-04481551511b","version":6,"status":"done","tags":[],"date":"2026-02-19T15:44:10Z","url":{"schema":"https","addr":"ibkrgroup.cc/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":0,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"final":{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"title":"undefined","dom":{"size":28079,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21210)","md5":"b63c4056e5c284567fdae042326d6b66","sha1":"8dc053524bace58036e227836b622bce9fc9b820","sha256":"831f5e75d27ab905eab3b60609d34dbf5e706f5b2319a3c2878ffaf82bb346b9","sha512":"4b9a198624a50e51e2c08e846029e2f687b9147fc25e9fce9ddfa24032f0a8ee1fba763c03efd3b11a2a7de827011c58f1132ddc19ff04d8d87a4a456d320e8f","ssdeep":"192:eeT7KuwxDkZCxfM2nfD3bM/vCCCCdCgwDhcsupljaHqcezoX8Dyyszq/Kz1rgf3K:z6uwxQZCx02ZdiFwDh3updCeikRYOq3x","tlshash":"a4c25c756a0111ab13bb88c1f5617e1f76e3f30f80068185bbbc918a2fd3db6b7255a1","dom_hash":"domhashcbb9c71cf8c12f129ac64d7c8eee10c1","first_seen":"2026-02-19T15:44:21.772865Z","last_seen":"2026-02-19T15:44:21.772865Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ibkrgroup.cc/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":0,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-26T15:44:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:54Z","timestamp":1771515834,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35900,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:54.183463+0000\",\"flow_id\":1444436957066537,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35900,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":915,\"bytes_toclient\":5965,\"start\":\"2026-02-19T15:43:53.521513+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:54Z","timestamp":1771515834,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35932,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:54.188484+0000\",\"flow_id\":624555617548307,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35932,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":915,\"bytes_toclient\":5965,\"start\":\"2026-02-19T15:43:53.522259+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:54Z","timestamp":1771515834,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35918,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:54.191993+0000\",\"flow_id\":1064332351371126,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35918,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-02-19T15:43:53.522102+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:54Z","timestamp":1771515834,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35914,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:54.194410+0000\",\"flow_id\":896777087219283,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35914,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":915,\"bytes_toclient\":5965,\"start\":\"2026-02-19T15:43:53.521811+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:54Z","timestamp":1771515834,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35936,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:54.201131+0000\",\"flow_id\":810710237575376,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35936,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-02-19T15:43:53.522448+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:54Z","timestamp":1771515834,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35906,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:54.206514+0000\",\"flow_id\":1834533804176862,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35906,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":915,\"bytes_toclient\":5965,\"start\":\"2026-02-19T15:43:53.521694+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:54Z","timestamp":1771515834,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35958,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:54.443729+0000\",\"flow_id\":1209225220521985,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35958,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":915,\"bytes_toclient\":5965,\"start\":\"2026-02-19T15:43:53.786433+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:54Z","timestamp":1771515834,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35988,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:54.453338+0000\",\"flow_id\":1013391891694075,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35988,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":915,\"bytes_toclient\":3148,\"start\":\"2026-02-19T15:43:53.786939+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:54Z","timestamp":1771515834,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35972,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:54.458555+0000\",\"flow_id\":887942339428741,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35972,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":5911,\"start\":\"2026-02-19T15:43:53.786821+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:54Z","timestamp":1771515834,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35952,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:54.464845+0000\",\"flow_id\":122544807607938,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35952,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":915,\"bytes_toclient\":5965,\"start\":\"2026-02-19T15:43:53.786050+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:54Z","timestamp":1771515834,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35964,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:54.524938+0000\",\"flow_id\":582370448703637,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35964,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":4451,\"start\":\"2026-02-19T15:43:53.786581+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-19T15:43:55Z","timestamp":1771515835,"ip_dst":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35992,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-19T15:43:55.453752+0000\",\"flow_id\":285130794533526,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35992,\"dest_ip\":\"47.79.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"conversation-data.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":3,\"bytes_toserver\":989,\"bytes_toclient\":1634,\"start\":\"2026-02-19T15:43:53.787094+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"webapi.ibkrgroup.cc","ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":13,"request_count":13,"received_data":58426,"sent_data":6687,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ibkrgroup.cc","ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":38,"request_count":38,"received_data":16524267,"sent_data":15871,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-02-19T15:44:14.26021Z","last_seen":"2026-02-19T15:44:14.26021Z","alert_count":0,"request_count":27,"received_data":438970,"sent_data":12640,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"hw.rangwodf.cc","ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-12","domain_rank":0,"first_seen":"2025-06-03T12:45:54.191815Z","last_seen":"2026-02-11T03:20:05.208617Z","alert_count":0,"request_count":1,"received_data":5021,"sent_data":372,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/th-cdc5d9b4.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"scriptElement","is_inline":false,"md5":"918231d9785c3b8559ea4e5899027eee","sha1":"6ae633d4d6176ef539649d0b9bdcb76bba2fadd0","sha256":"64938ce3522089643de045e4bd2374773689badbdf66d91684b4795b77a82f66","sha512":"01c84d63a9235706c0264959048be826927faee8549729cc9848ebbe8006dfc4fb502d58e6b62a42f159e3e52f366f5f86d023d05b64ed94a44463bfc7429e82","ssdeep":"1536:ixvshGsqiSecUeGW24+u4LMVPrbekJk2VRVTgiHUN4iT0J/Mq0UuQEpLB1t23obs:ixkq/ecUeGW24+u4LMVPrbek62VRVTgS","tlshash":"ab63bb73354aa99878452d1b651db785627a9e847fb2f4d005c82dadb2f0b0ac433ef3","size":71839,"data":"","first_seen":"2026-02-19T15:44:21.857463Z","last_seen":"2026-02-19T15:44:21.857463Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-643dc15a.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7df2be0f14f8e2b7572228c70504e641","sha1":"1c089b125b53dcafbc2b806486d6ab78813403c7","sha256":"2752ec45e95eb049950828afb9a91e97fcdd8fa3374ff5e38384f015efebe6bf","sha512":"5b68a22d240ae7025ae5b266febec998e26917f4eaedae3344133295688a553bdb13e17654cbef21834417cc5508ae55cb9a749a2c1248078253d362f11344a2","ssdeep":"192:QYBNPHTLH0jEYHOnc8MACffzcic5xzshuuwgveJNaGrvBx1i2e9MIeYYSyEZJC+g:QYB5Wqp2m5CuuwgveJNaGH1i2e/eYYS6","tlshash":"a73294a5f506aa3ce6bba00140c81050722a7fe7500d89e3bafc6d427767fbc7b1d619","size":11565,"data":"","first_seen":"2026-02-19T15:44:21.800404Z","last_seen":"2026-02-19T15:44:21.800404Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","size":4366,"data":"","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6fce48061c6fe3d628ad5413270c5e2","sha1":"fc0dc853121514a03de1ab43eb7a15cf49154930","sha256":"25b4483773ff8ccc5dd49ea2980f79aadb76a1171043c1cb96e75df555085090","sha512":"2a45709cd44bbfea485212c98baf7f94519153bb74c979573f172fcc08dd06a01188e26209897694bf70ef22be123181e0eb25820ad1746bb6fe8016d023c586","ssdeep":"","tlshash":"2b11abfe191a602a6303804e976b7811643250a9000a184177cc9e9dbb9ab7dd0cfb8c","size":1048,"data":"","first_seen":"2026-02-19T15:44:21.858741Z","last_seen":"2026-02-19T15:44:21.858741Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-05T08:56:49.719313Z","times_seen":41072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-0a7f0fe8.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"importedModule","is_inline":false,"md5":"34f1855fcdcea85ba317f462e77240b2","sha1":"76499f3e4d71b89a5aa6169e9b87ac1402b32285","sha256":"2b7bf205b6effbb271c4bb95f3fa9c401709cd1d04f1ad62b8af6718b540f935","sha512":"795f97b19c2da96566edb8b2009099de37fee97fece1d821044575593cef86790205760bd90d3e7979cf214dc3c61541459b06ad4a66dedbda3b8ed5e4de2e94","ssdeep":"","tlshash":"64f00e3fb96b81721bb388aca2231820b61c1f262b50c5d8d58a0a14c7388e3e56e219","size":510,"data":"","first_seen":"2026-02-19T15:44:21.781865Z","last_seen":"2026-02-19T15:44:21.781865Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-ddeb13c9.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"importedModule","is_inline":false,"md5":"b8d26940e2026acfdeb058fe92884fc2","sha1":"311b70e46253946d4fbfd32e3288a39cca911919","sha256":"e05d774d38f447b6f4efd42a25fcf537764c30fe53f511ce836762f389e7dccf","sha512":"66eddbd93bc171817d87fed6028b994de95f4a2acc25854f08da8727ddc86f110bb93579c5133626da421a1dbaad78f8b247ca446bc8c31118a98a455e260874","ssdeep":"96:I+7kcX1axeu09YANCqD+wNiZ/utboai7EMP3hvCC3L0eS/9D4qo3:zXX1axeuYYaCqiwNyutbtyfhvBdglo3","tlshash":"28a1b449fc02c9b9adb7548960580410318d7ff6b11848f2f3fe98496374ebae791727","size":4915,"data":"","first_seen":"2026-02-19T15:44:21.785135Z","last_seen":"2026-02-19T15:44:21.785135Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/filters-e7434965.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"importedModule","is_inline":false,"md5":"022698939fc9abc053e15f539daaf0a6","sha1":"d29d163c0f8bff82a18c6bcb41723a61430e7878","sha256":"d0e3b87180241f273484b0be543d6bdaa261f0592ba8579d8ef4434fbb5c2923","sha512":"377ab16f722ed359e622dace85bae2ff08116274e9d8d5b452f4fb17fc0651279fb9421c7793708bd7bb78396efc28b7f8de45943fe5c6a2850f27724107962e","ssdeep":"","tlshash":"0c5135fdfcc7a13356ea6ef940288454728eae20686e0a4df54fd0455933888e07f768","size":3102,"data":"","first_seen":"2026-02-19T15:44:21.809887Z","last_seen":"2026-02-19T15:44:21.809887Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"275439d6c6a718d28f46ed775ea13f42","sha1":"85c12baff7e01c12ecda08b205cb9c04a9803566","sha256":"b0b695de96d53939b5d108f78f9f4a7f5ff868abc3999cd024ab209869abace8","sha512":"02ebfd400c31f9fe89ed088218d9498b700ac3ca23717ccaacc15a56708076fe4f0fc5e3405cd461d749a5e65abbe9a753efcd58dcfe479d906dcd323ca659bf","ssdeep":"","tlshash":"91d0a7d750936c0479457826066f36d4e034d01a3869eec1ccd8e5883ef1574c133ecc","size":251,"data":"","first_seen":"2026-02-19T15:44:21.860801Z","last_seen":"2026-06-22T17:07:55.900676Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/charting_library/charting_library.min.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-29T22:52:22.712247Z","times_seen":1299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c5a6a59414121ce78147b0890fb71b49","sha1":"e936863290c4e216f596af57bd881ca035abfdc4","sha256":"5a541278b82595da97b566fcafcb438700199a8b6b5b60c118d8e26a08b9271b","sha512":"2eae2b9b5b9380a849882bed7c86d0379e16e38784570079369f041e5a1b2470eeb9e59684bf45ffb34d0118c9e03af14122cec010626eee51703f7fa7f83a94","ssdeep":"","tlshash":"a7e0a3936c29d1de0c7907de98dd1dd1a8691f3bc414450f306065604eb74105f1cdac","size":420,"data":"","first_seen":"2026-02-19T15:44:21.862071Z","last_seen":"2026-02-19T15:44:21.862071Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-009d41a9.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"importedModule","is_inline":false,"md5":"72a14a916bf17c770ac45743b324fee2","sha1":"15fa0dabec488a22a707b852a8098cd35a9b6c59","sha256":"761bc9e1312eeea173a19c23697119bcf0deaefc77b03ff5f43fe95e32a13c34","sha512":"781e902a6cc744178a8ef5e2593956fc513adcc819ac7efdfa176a2e2f85d3f2b60b8476c5d6608ffd6e38699a70436e6cdb3920fd92ef61eea1e46cf9f1dd1e","ssdeep":"","tlshash":"3801b8f9fd0d8ebb0ea20a4141913601140a2fddfa1419e298867d6a1be5950dbde72e","size":776,"data":"","first_seen":"2026-02-19T15:44:21.831839Z","last_seen":"2026-02-19T15:44:21.831839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/currencyItem-43495e5f.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"importedModule","is_inline":false,"md5":"98b6968492509a1a79317e10fa2b7c4c","sha1":"8fbabe78a7b9e7d04d352c3c2956827d1c95c85c","sha256":"a5998d8b05699a6394e0200204a91160d8e0cb11ea648dfb95d3435692470d11","sha512":"bdbf284526c9457379c4c95e4ed72ca5244208e2139d39451a7de0f2ab14aa26be5114aaf3af9f3139391052270822f90fa828dc08fc660ca03073a4ad2a971d","ssdeep":"","tlshash":"2a21df9aa902c7b1cbbe546281bd5414130d7bea701185c5ebed148a3b8a9fcd728a31","size":1206,"data":"","first_seen":"2026-02-19T15:44:21.811355Z","last_seen":"2026-02-19T15:44:21.811355Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b269982c1b82687d80e22d3cc5f71c5c","sha1":"6545961d4c8bb8a20db03356334c67a3ea9ed7ee","sha256":"6230d62e0a7ff51309c42be35fe9346d33fde2b14882f60911d21aef024146f3","sha512":"ffa75148e6239e171c3ff65f8b00db9da0466dda23960a1eedf46fbc809894b98a4658984f17171eaaf76efec857e93b093a8abf3113349013dfaf405cf470da","ssdeep":"","tlshash":"72c08cc4b0d32d002612655010af34e4902440267088ab438d94ec982ea22b08233e98","size":145,"data":"","first_seen":"2026-02-19T15:44:21.863355Z","last_seen":"2026-06-22T17:07:55.908926Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2d2efc1df4c1490d59b6a7f51481f98a","sha1":"decc0d6247c19aa8c00f02929685944214260ddc","sha256":"e61bd8e56eb525b0fa12822867c308791a215b78d8553b8e85cf9c47dfc728a5","sha512":"108a3a6eacd19803657a3fccb6013cb1c7eefa2752e164b3db52c364c2fe36934374bd90a05a0bb4460e1d4c0d274eb4ad501b544ec316d8ddcd4ca33993e336","ssdeep":"","tlshash":"90c08cc6a0d23e041a02a41415af34e4a028482ab4482bc28da4dc5c2e620b18233ee8","size":154,"data":"","first_seen":"2024-08-09T03:22:43Z","last_seen":"2026-07-27T19:02:59.496002Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d78092704991fdf915a08d1d3631fc95","sha1":"d8db16d72f79c399298bcf912524e9d51774b057","sha256":"737d0c5997009d5884d7f2877107d67a87a8b49063ab1683ccae7b382aefc8f8","sha512":"c3f606546e0b75878de9c3b6e3cbf3a3255777f21783eb7349099cac06ec3c56c176bef1d2e2b07fcfd95e025298975e106e0ccae1b5369c2a1e719d3f5ade57","ssdeep":"","tlshash":"c5c08cd6a0d22d001602641010af34e49024402a70482bc2cc94d8482e620b48233e98","size":145,"data":"","first_seen":"2024-04-30T09:10:11Z","last_seen":"2026-06-22T17:07:55.901237Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e2f34242280922b62e98fe9c1e49588f","sha1":"7ecabb24e736a65335f8987ce993cc58c8408e7d","sha256":"a3e8af9e14cbae57f99e133425eed861d74fea5876dc6ee38125675ce85ae634","sha512":"0f56e38ea526a6974fa53198c9d3e667fe19c3584bf30e83dda5309286e3ae42c29ac4388a2683059e6b1dcfc9bc47074a4e677c58cee2d5dd72400c35410593","ssdeep":"","tlshash":"6ec08cd6a0d22e001642652151af35f8a024842ab848bfd38ca4d8a82ea32b08233ed8","size":154,"data":"","first_seen":"2023-06-16T22:20:35Z","last_seen":"2026-07-03T21:52:52.746029Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-05T08:06:37.194734Z","times_seen":42573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/vendor-2fc8d86c.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"importedModule","is_inline":false,"md5":"98ee6902c64ed9fd6c2865b82faa4fbb","sha1":"68c263e1b3107e06f5128380a60a0cae1396c66e","sha256":"da3c4e25bfce818cd9749b250115e6f4595d827c316a04130387dfabe532108c","sha512":"7e1cc7104808f4e2c6c2ca7a7aff5a7e9f0ab614c767b4796f1ea48ccc26459b9d679fb0040841b46f08da9ed8246b08402abe6cd13bc2a6672886d61b844a93","ssdeep":"12288:Mv6NLEg6h1uVDwbV7VPY+L668W/LGDV2e8qwnWkOukKwaiVe:Mv65Eg1VUh7a+J/LGD8ownWkOukaiE","tlshash":"941528c97292f06147ab24e240bb0006f3396e59744e84a4f16d98db7d7ad89e277f3c","size":879077,"data":"","first_seen":"2026-02-19T15:44:21.81653Z","last_seen":"2026-02-19T15:44:21.81653Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"25bd6555dc65431e23725ed117aa4f0a","sha1":"569928dc13dc2e796a6d36b9662f94c5c30af4fb","sha256":"11a47ada765c54d1f861d0540cc979e6e2ce0ef90cd92d1c632c46384ca776fd","sha512":"628bf375f664c5c27bf6a231606ffbd69c615956ecd9c481b1935765eaf57c20f7111ba5c358043e29069e60eff66512d0bc854900710a4d9cd39e268c92af1d","ssdeep":"","tlshash":"b7c08cc5a0c33d401a1a681021af35e4a028402674481bc28ce8e8883e230b08233e98","size":151,"data":"","first_seen":"2024-04-30T09:10:12Z","last_seen":"2026-03-14T04:17:33.9377Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"89a0cfe5ec1d165676d63de26110fcc4","sha1":"06a692e61b59c0fe2d296d835ba4615e743bbf30","sha256":"6d425d8711784565d8c33ee841e52bec19bd67aa112ee8347f4bd18a89d36b6c","sha512":"466407f76ed42e6928383acc62525007f8363533a16fb78a9daaceae724c2cffe00e4b74921d01b1ec772cca90729e0f5c9793af9c16a2d21d2d38c3bb3562cf","ssdeep":"","tlshash":"55c08cc6b0d6ad001612a41110af34e8a038442a71481bc2cca8d8482e620b08233ee8","size":148,"data":"","first_seen":"2024-04-30T09:10:11Z","last_seen":"2026-07-19T17:19:00.132159Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8bb13b71ca52ffef234398fc89a57e36","sha1":"1254dadff0c0e2c75afc2a40a8cca04b713f853f","sha256":"97f96e23fcb613163cd32e6d3e1b6b1e95aea957f54b4654934520719c8cdb2f","sha512":"ea9030cb71c01d4bde7a1f0f499380ebf862fa1dcdc3bfeb14d57d2dddcfc940b2977013fde5b1c82ca32249031a387640046ab1c250a0af3b82a4cf1c4c88e5","ssdeep":"","tlshash":"3dc08cdba0dbad142602642264af35e49038402a76982bc28cd4e8883eb20b08233ed8","size":163,"data":"","first_seen":"2024-04-30T09:10:10Z","last_seen":"2026-06-22T17:07:55.90171Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"84a55142f0787ab47b9c613fd2787031","sha1":"095c14cdbd148053c44c1e3ca69753abac5840c1","sha256":"f2be20b3ad41b8fe177ea9eefd113d4c3d1076bceca1cb772bae6b7851bf7899","sha512":"d8a56daefde5a42d1e52fbc55c09aea32859c0c22e0364d77c11ec83afd8a96788430bcf7788ff7d4a7739c43bcf23b9f339da307863f5f78871a09e7bd421de","ssdeep":"","tlshash":"9ec08cc6a0e63e2026026a1154af34e89028402a70482bd28c94e8483e620b08233ed8","size":154,"data":"","first_seen":"2024-04-30T09:10:11Z","last_seen":"2026-06-22T17:07:55.900154Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-1e600a6a.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6cf4cf1750120c20b63cf88fe259146","sha1":"3bce956d43256d14dfe3daa1d11648321dd9149d","sha256":"845a613b73559d9f2f38bbb7a267ed213ba90f71ab4727fb3ee3b96c463f4582","sha512":"8e0a6b1b7e8910663adf0335a5713f59e5220f806ec15c07de6b7a3ff70c1820a608a2738992de03fb705da16fffff287be37914d52c7520b0b0976a379c868c","ssdeep":"768:wn6Hm/gUNGw1RrbPneHmbEUGA3WL2DReOEbgv+slQNDY+XZ2rYSCvf3Xr6Ohflem:0rsAroAVDZ4Y+p2Y9UzMDv","tlshash":"d2a33a8aa40b1fbf68be0844a94b595030690fd39c8dccd3b3ba6e1527fec94635971d","size":99419,"data":"","first_seen":"2026-02-19T15:44:21.824636Z","last_seen":"2026-02-19T15:44:21.824636Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c30f3bd46b3e9a3a40dcab8bba9da564","sha1":"d050cf1f932f8babf35792276fbac73910aa3401","sha256":"bfdf14e4f3fe080f303ddb79a41287252cda397503c533a6231c04911d9bbe04","sha512":"743d00e98a1b231312525232f8b1c1ae41ee85f199632a879f9aff20e1ca03824a2a837a4a620b52ae321decedc2c1e648f09a5eca99ddcf7495dae357834254","ssdeep":"","tlshash":"47c08cc6b0e22d002616641010af35e89024486ab0481bc29cd4dc5c3f320b08233e98","size":151,"data":"","first_seen":"2026-02-19T15:44:21.869741Z","last_seen":"2026-02-19T15:44:21.869741Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5bc2b3681073403e02c34a08ee4339ae","sha1":"471897e138f974c71129e7595956c3411e3100ce","sha256":"dab6464f1b6564798c67a2f941f48b5e9b150018171d4a7aad02d5505f62cc71","sha512":"9842df1dd46e900d2e927d533ae757a80141db82d322a8b1ca0b4039115ae8ff2fc188a8f85d3afa7c50d342556f2f68e2a51c2480584d70072a738909a64660","ssdeep":"","tlshash":"9bc08cc9b0d6ad002602a45550afb8e8a034882672482bc2cd98d8482ea20b09233ee8","size":160,"data":"","first_seen":"2025-12-06T03:25:31.926971Z","last_seen":"2026-03-14T04:17:33.965973Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"624badab8a5761624f3e7eea67752213","sha1":"263beae2d163e2f98533d051455107d85fec771b","sha256":"5720543f62eaf181dfa5a4fad82321c11bcc1f5ccb3b05e3bcfb622b14b9d57e","sha512":"06f85eba76736a41d366238a4f849b01c2cd79a5d7091abffe0d7d4dc19b689229701c3f5d4e8a8df1504331d09a1fe6690e5168c40981ad8895fc6253521f8d","ssdeep":"","tlshash":"ebc012c76192694065026566117f35d4a138c8177899abd28c94e85d2be21b48133ed9","size":190,"data":"","first_seen":"2026-02-19T15:44:21.871931Z","last_seen":"2026-06-22T17:07:55.907205Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/#/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"77daf950aa82e60af91f54672ddbed0e","sha1":"e2b5a819942f68087d34f4f0bb0c21324930f57b","sha256":"fd5fcb4b9f6a88bc547eb15033822d4568cded8006481b2db3445e9673d73c7a","sha512":"dc1c194eda864fad89a6b74975e08e653d62c0a1caf7d8308dd3b3839bd46254025a1b1691912c2a3678348d73d8675744a7f109fc38f43a508952cca7298ec1","ssdeep":"","tlshash":"d1c012e760d7bd0035065427156f39d450244026755816d29dd4e8583e720b04133dd9","size":181,"data":"","first_seen":"2026-02-19T15:44:21.873258Z","last_seen":"2026-06-22T17:07:55.897464Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-1891c5e5.css","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-1891c5e5.css HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-2102\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8450,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8449)","md5":"9afe8972f8b2e0d55caab227b518223b","sha1":"998794634273830b48a29787fd05eaf19c28377b","sha256":"1891c5e51cb7a80939e4e362b6c4cebd3d98acad1f801ddf533602ff1521cc16","sha512":"4deab5b5cb54fbe045805536ca92c6c7e952dcf86c02ea16d816551f3bb8056c17473eab2b763e6d3cc791dd4137eccb27040990f4d4f0a2879ba8b60aa72018","ssdeep":"96:uqjiMQ/jgXMp5mXUVM2tL0a5OP3RmvxsIgYy62rpYYFL8Ds6lNbrfnEmfr9I4FMF:uqnQbtYvWq0lmIM8RLdkaS","tlshash":"8c02213df695263a6d36e069bed44dccf12ab953e99399e0fa2395110dc72e3173005c","first_seen":"2026-02-19T15:44:21.778938Z","last_seen":"2026-02-19T15:44:21.778938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-0a7f0fe8.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-0a7f0fe8.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 510\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\netag: \"6900b151-1fe\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"34f1855fcdcea85ba317f462e77240b2","sha1":"76499f3e4d71b89a5aa6169e9b87ac1402b32285","sha256":"2b7bf205b6effbb271c4bb95f3fa9c401709cd1d04f1ad62b8af6718b540f935","sha512":"795f97b19c2da96566edb8b2009099de37fee97fece1d821044575593cef86790205760bd90d3e7979cf214dc3c61541459b06ad4a66dedbda3b8ed5e4de2e94","ssdeep":"","tlshash":"64f00e3fb96b81721bb388aca2231820b61c1f262b50c5d8d58a0a14c7388e3e56e219","first_seen":"2026-02-19T15:44:21.781865Z","last_seen":"2026-02-19T15:44:21.781865Z","times_seen":1,"resource_available":true,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-ddeb13c9.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:52.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-ddeb13c9.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-1333\"\r\nexpires: Fri, 20 Feb 2026 03:43:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4915,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4910)","md5":"b8d26940e2026acfdeb058fe92884fc2","sha1":"311b70e46253946d4fbfd32e3288a39cca911919","sha256":"e05d774d38f447b6f4efd42a25fcf537764c30fe53f511ce836762f389e7dccf","sha512":"66eddbd93bc171817d87fed6028b994de95f4a2acc25854f08da8727ddc86f110bb93579c5133626da421a1dbaad78f8b247ca446bc8c31118a98a455e260874","ssdeep":"96:I+7kcX1axeu09YANCqD+wNiZ/utboai7EMP3hvCC3L0eS/9D4qo3:zXX1axeuYYaCqiwNyutbtyfhvBdglo3","tlshash":"28a1b449fc02c9b9adb7548960580410318d7ff6b11848f2f3fe98496374ebae791727","first_seen":"2026-02-19T15:44:21.785135Z","last_seen":"2026-02-19T15:44:21.785135Z","times_seen":1,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/resource/svg/light/user.svg?2.0.1761653073861","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1761653073861 HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 551\r\nlast-modified: Tue, 28 Oct 2025 12:04:22 GMT\r\netag: \"6900b146-227\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-28T18:19:13.9733Z","times_seen":404,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/resource/svg/light/mengbanzu13.svg?2.0.1761653073861","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1761653073861 HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 28 Oct 2025 12:04:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b146-4b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-07-29T22:52:22.743694Z","times_seen":928,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/AUDJPY.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/AUDJPY.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:56 GMT\r\nContent-Type: image/png\r\nContent-Length: 5279\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBCE173EA33393F62DD\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"5C6928709ECA3EEA7B6C98BDF15C2AA7\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13704564278324865476\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XGkocJ7KPup7bJi98Vwqpw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"5c6928709eca3eea7b6c98bdf15c2aa7","sha1":"3c925ab9fd8d67d85a5b06ac3ffb1f082d11ff0d","sha256":"0e32faee1c0c8b2825923a8e3d7f40b16be2c675b6edd491c2464d4cf1028128","sha512":"014c076cc4abea82d89b6fbc51c47d6c86e26407083fe40caff5b8d22258d33c8bb76b1d79ccc2527c67404939fd02dbbbe2f9968ba94fa9642fa8e78cf87767","ssdeep":"96:7UluL95T84lq2ZQXnX+3GEAztHYyZ91ZvTIL0Qy1bE:78uh5TSX+3Qh7ZvHQ+I","tlshash":"83b18d891d0a6eb0ffe7b70eb2b06083b1434d9102d1aaab60d135b7aabc9105a551e3","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-08-01T23:22:20.419086Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2974,"timings":{"blocked":2638,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-19T15:43:47.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:48 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 16 Dec 2025 14:28:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69416c80-14e6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5350,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"cf3f72908e91aee0c3e2284a01a06c5f","sha1":"c1e7099968b7d65c2a74b159640efda361a5bf96","sha256":"29752ec8f9f9b87fa1df5af81d0d23d03811ea0a7cbf4df4e2fe9ea418665f41","sha512":"cbdd1a72db33de90c0720f23dd73ed702fac399629d1bad37638653d24565fcfa9950f11a90aaeb6057f2c67ad8cb98096a85c1138c24d20225ce70447c68308","ssdeep":"96:+r8245f53uSPEAkBazVZt/dmr6TCZydHRH/gi2mUsGKAiowGwuB1niHomiHqXH/z:+FE9PEAwa32ZCxfX2nfD3bwuB1nitiqb","tlshash":"31b170b75ca5882a23b1052aaeebf018df6115a3851a5854b0cc40ee4fe5fd5c4cbb66","first_seen":"2026-02-19T15:44:21.792997Z","last_seen":"2026-02-19T15:44:21.792997Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2012,"timings":{"blocked":839,"dns":174,"connect":329,"send":0,"wait":330,"receive":0,"ssl":336},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/vendor-72ef657d.css","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:48.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-16997\"\r\nexpires: Fri, 20 Feb 2026 03:43:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92567,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:32:04.730749Z","times_seen":353,"resource_available":false,"data":null}},"time_used":989,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":989,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:48.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rangwodf.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:00:44 GMT","end":"Fri, 24 Apr 2026 10:59:07 GMT"},"fingerprint":{"sha1":"A7:D7:98:60:01:FB:A2:7D:68:92:7C:66:27:0F:6E:9F:EF:58:EE:0D","sha256":"30:5B:B5:CD:C6:1D:DC:50:AB:B2:5C:F7:80:BB:2E:B0:F2:8C:5D:36:95:24:63:FC:BF:96:EE:7B:E0:58:33:CC"}}},"request":{"raw":"GET /1.js HTTP/1.1\r\nHost: hw.rangwodf.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 15:43:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Jan 2026 15:40:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ds%2FH8yYdVpN9MjMX9WnAdSdMsCcDV72q2KsIhAwA%2FMk1rZ9Ny8J%2BQCPxVOvJMvO%2Bg0YdLXO6nj9rVdwa6sowMYWWNnVJabuQZgj1ENO\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"695bdb5c-110e\"\r\ncontent-encoding: br\r\ncf-ray: 9d06e1cb393495bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4366,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"resource_available":true,"data":null}},"time_used":592,"timings":{"blocked":85,"dns":59,"connect":8,"send":0,"wait":414,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/echo2.07e0575abb3a048c6a27eb82b4b905eff.jpeg?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo2.07e0575abb3a048c6a27eb82b4b905eff.jpeg?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12816\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBDE173EA3339F264DD\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"56218E4BCB918B52A51770B686018444\"\r\nLast-Modified: Mon, 10 Feb 2025 07:59:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14387893976716132693\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ViGOS8uRi1KlF3C2hgGERA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12816,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"56218e4bcb918b52a51770b686018444","sha1":"cd07708d5620dc05bdc7573c8cfc24d097413156","sha256":"03758153da47a84fd31b7835f038de7c5e7865b0aa7626d02c599cec63ef27ad","sha512":"316d184e103870381c129819129f18b7ee32c76850c41f7a2c27fbcbf0d854c98b511e8cf1f67efa51f0cc2af17381d4c155a0df4958e94cba483765c0ab7af1","ssdeep":"384:bQoHr7rQkQIXvrOUjEvzXpLLEG8SwhL1HWUc:bQcrJQCOUgzZLIG8SwhxHWD","tlshash":"5442bf8d7d996ed9d2b268af45808c69e3b1272c01f6bd98cea54438b701db1cc39b53","first_seen":"2025-07-18T09:36:58.753038Z","last_seen":"2026-02-19T15:44:21.796842Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3995,"timings":{"blocked":3652,"dns":0,"connect":0,"send":0,"wait":342,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: th\r\nlang: th\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3724,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5c2bfbdbf83a0857e86b773392fbf3de","sha1":"112dce6a90ea036e6360a25cc513cc13f815e4de","sha256":"105098b8da7366adbec4bebcc0c8a0bd6fa166de266280a8e61c34a79dda1247","sha512":"1df217e6877176bcebedb5b9c78e1702f8800ccd1eedde0241d187ca70ebf2ff41858237395f8504035d8a4d4705c19adf3562c87627bab9f12242c1e89529a7","ssdeep":"","tlshash":"3e71680e153c8e6d090909d324cdbdc9d39e2b87d661cc78aa96cf1c45f16bb1b1f648","first_seen":"2026-02-19T15:44:21.798774Z","last_seen":"2026-02-19T15:44:21.798774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-643dc15a.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-643dc15a.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-2d2d\"\r\nexpires: Fri, 20 Feb 2026 03:43:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11565,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (11562)","md5":"7df2be0f14f8e2b7572228c70504e641","sha1":"1c089b125b53dcafbc2b806486d6ab78813403c7","sha256":"2752ec45e95eb049950828afb9a91e97fcdd8fa3374ff5e38384f015efebe6bf","sha512":"5b68a22d240ae7025ae5b266febec998e26917f4eaedae3344133295688a553bdb13e17654cbef21834417cc5508ae55cb9a749a2c1248078253d362f11344a2","ssdeep":"192:QYBNPHTLH0jEYHOnc8MACffzcic5xzshuuwgveJNaGrvBx1i2e9MIeYYSyEZJC+g:QYB5Wqp2m5CuuwgveJNaGH1i2e/eYYS6","tlshash":"a73294a5f506aa3ce6bba00140c81050722a7fe7500d89e3bafc6d427767fbc7b1d619","first_seen":"2026-02-19T15:44:21.800404Z","last_seen":"2026-02-19T15:44:21.800404Z","times_seen":1,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/th-cdc5d9b4.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:52.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/th-cdc5d9b4.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-11c97\"\r\nexpires: Fri, 20 Feb 2026 03:43:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72855,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (36239), with no line terminators","md5":"c52e759368e845b943bb03d8cce0870e","sha1":"cbbc6f60a2252b65620f6be2564caa379197f1ef","sha256":"06786d4c3b2ae78beb5eabab99b452d24dc99566f4122c9d7d5174cbe561f5b1","sha512":"e0ddc98b867f6a7f29b8d0761d15532114ffddadf449f493ec757c607106b2ed2cfddc73ee68b3da653a8b1fda766dd093f2b1797b167ee0d42dbe12c9d2e8e2","ssdeep":"1536:ixvshGsqiSecUeGW24+u4LMVPrbekJk2VRVTgiHUN4iT0J/Mq0UuQEJf:ixkq/ecUeGW24+u4LMVPrbek62VRVTgp","tlshash":"1083dd73a466d75879c93c17390e778653718e91bba2f4cc09c8d85932ea7629033ee3","first_seen":"2026-02-19T15:44:21.802045Z","last_seen":"2026-02-19T15:44:21.802045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/platform/dev/logo.png?2.0.1761653073861","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /platform/dev/logo.png?2.0.1761653073861 HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Oct 2025 12:04:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b141-2967\"\r\nexpires: Sat, 21 Mar 2026 15:43:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10599,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"e400fafbd747742bc693bfc788a95d8b","sha1":"53137bb1115c1cf83757bf943b9d2255df2c62c5","sha256":"dbf1ea21cd3abbb43b46ffd5e47920fa090cc5b9701c1b6a910e2bdef359c1c9","sha512":"428186c081bf72e5ec702092d7adb26f3d9270a746febe2c926d96f92e5834c506cc56c3f934ba204ccd03b191e4647874a7d59b56360b48fe14bc5ade3a43bc","ssdeep":"192:6cOcZ/0BAUupju+uDpQQXs3kRxQcJmo6I6NP1faN3hhMWH7ec3UNLH9tgGiOf:JqWcj8UR+bP1fad/MWH7X3yj9yGR","tlshash":"1e22be2d1cd6d19eaebd07ed48d3620c54344e0c921af0eda6120a37e0e15b93eb690f","first_seen":"2026-02-19T15:44:21.804101Z","last_seen":"2026-02-19T15:44:21.804101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/ethereum.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/ethereum.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 9807\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBB385D5B3431BBD4C7\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"12D9722461759CEFFF02D9076A3D2718\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9445008190181339835\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EtlyJGF1nO//AtkHaj0nGA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.519332Z","times_seen":824,"resource_available":false,"data":null}},"time_used":2291,"timings":{"blocked":1952,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/litecoin.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/litecoin.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBB9D920A39316CF278\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"BB27C369A3AA54D9C1F8E59E1706DA48\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uyfDaaOqVNnB+OWeFwbaSA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-07-30T19:44:59.560175Z","times_seen":885,"resource_available":false,"data":null}},"time_used":2737,"timings":{"blocked":2050,"dns":0,"connect":0,"send":0,"wait":347,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/solana.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/solana.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBA624592373892FC9D\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"670C723ABC22056BC5368CA2A97DD6A2\"\r\nLast-Modified: Sat, 15 Feb 2025 08:25:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10769821075161595358\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.518064Z","times_seen":932,"resource_available":false,"data":null}},"time_used":5857,"timings":{"blocked":1285,"dns":0,"connect":343,"send":0,"wait":3549,"receive":1,"ssl":671},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/echo2.007cf86300a504ff9886c6e179616f61f.jpeg?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo2.007cf86300a504ff9886c6e179616f61f.jpeg?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4344\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBC385D5B34316FD8C7\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"6A530C54F288C7F0AE54D3C44842F96C\"\r\nLast-Modified: Mon, 10 Feb 2025 07:58:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9896063616710891509\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: alMMVPKIx/CuVNPESEL5bA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"6a530c54f288c7f0ae54d3c44842f96c","sha1":"9dcc2b4b389ee7257ea37703a7b3e9e841a3e243","sha256":"fbc766f17318548e9785f101ac1397898f2a468ddb28b8316dda956076b1f9c5","sha512":"e8fab73a4039be7367ffce7a4c1f79a46f268d3a6a0e1b59c449e072aecd8d377d992e6ea45101a00934b37046de8ea8fe13704362e93ff57277b1fa27da8946","ssdeep":"96:4g3p2FCtZZcyj1UnScsmV8M7gk2AsJ0a1tsb1ODoZ/Oc1JFr:4op2YTZcZnSchXMkzW0v1a89p","tlshash":"c9914ce39331b7d9119f192f393a2c291a62003516140b75aab7e25ec1e8e29c3257df","first_seen":"2026-02-19T15:44:21.807683Z","last_seen":"2026-02-19T15:44:21.807683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3277,"timings":{"blocked":2941,"dns":0,"connect":0,"send":0,"wait":335,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T11:03:23.939595Z","times_seen":17723502,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/filters-e7434965.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:52.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/filters-e7434965.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-c1e\"\r\nexpires: Fri, 20 Feb 2026 03:43:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"022698939fc9abc053e15f539daaf0a6","sha1":"d29d163c0f8bff82a18c6bcb41723a61430e7878","sha256":"d0e3b87180241f273484b0be543d6bdaa261f0592ba8579d8ef4434fbb5c2923","sha512":"377ab16f722ed359e622dace85bae2ff08116274e9d8d5b452f4fb17fc0651279fb9421c7793708bd7bb78396efc28b7f8de45943fe5c6a2850f27724107962e","ssdeep":"","tlshash":"0c5135fdfcc7a13356ea6ef940288454728eae20686e0a4df54fd0455933888e07f768","first_seen":"2026-02-19T15:44:21.809887Z","last_seen":"2026-02-19T15:44:21.809887Z","times_seen":1,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/currencyItem-43495e5f.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:52.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/currencyItem-43495e5f.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-4b6\"\r\nexpires: Fri, 20 Feb 2026 03:43:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"98b6968492509a1a79317e10fa2b7c4c","sha1":"8fbabe78a7b9e7d04d352c3c2956827d1c95c85c","sha256":"a5998d8b05699a6394e0200204a91160d8e0cb11ea648dfb95d3435692470d11","sha512":"bdbf284526c9457379c4c95e4ed72ca5244208e2139d39451a7de0f2ab14aa26be5114aaf3af9f3139391052270822f90fa828dc08fc660ca03073a4ad2a971d","ssdeep":"","tlshash":"2a21df9aa902c7b1cbbe546281bd5414130d7bea701185c5ebed148a3b8a9fcd728a31","first_seen":"2026-02-19T15:44:21.811355Z","last_seen":"2026-02-19T15:44:21.811355Z","times_seen":1,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/XAU.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/XAU.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 5689\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBB9D920A3931CEF078\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"78023B21DA9CE237163E08CAA29FE872\"\r\nLast-Modified: Sat, 15 Feb 2025 08:25:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12003613704444461773\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eAI7Idqc4jcWPgjKop/ocg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components 3","md5":"78023b21da9ce237163e08caa29fe872","sha1":"876edfd939d4a973b444d8a4d4335ab2dcc19928","sha256":"3644e5a3a2696cf6c4e85fb4d04428c7eb4bd20487f2a4b8d42fc76738da321e","sha512":"c0fb8b947f769cb26667778e55cba17741810454b58c8d58e934d1be23eab2fc875d522f5a04cce3458ba3220b7839cec2e867f6091fbf57062744f0d816aa6c","ssdeep":"96:IhO6EVCrEvXz44/K6jtNV50OsEw5aGS2zQODMR6tybJoyOsCw1uwDUx+IeNXRcEz:IhO6E9z4eK6jtNzwgGVQA8KxmMN92XWq","tlshash":"78c17e2b6b4d6811dcb914b481e0f15dd6077f75a29b2c0dadb22894b1d4deb0c30b8d","first_seen":"2025-08-27T06:41:40.796854Z","last_seen":"2026-07-23T14:04:28.965136Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1942,"timings":{"blocked":1599,"dns":0,"connect":0,"send":0,"wait":342,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/lever.jpeg?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/lever.jpeg?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5326\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBBE173EA33397760DD\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"C58F4C5B071E5912836E45C01AFA9E03\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15115948942539943788\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: xY9MWwceWRKDbkXAGvqeAw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"c58f4c5b071e5912836e45c01afa9e03","sha1":"b6f7e2a28f9041fac42acd69b8713fd811ea9ea5","sha256":"ea10356f413860e7186404344d50b9516f8e0fe1317df7d53fc81ce81c8e7bb3","sha512":"d61e62b7171e37d01a1453feaf4685f922dad6afe642d687afd248eda211886d2b75d3afe06dbe9fc5bcd483a28cfe3f4541f0a1af9325c0a3c0163bb74a29dc","ssdeep":"96:emHUsasfObCPgp0gc3oj3OSj6rTvdv6OzmrzobXdslboM65PHMZ1:uJO1Yp0gtjhjIvdv6OKrzobN465MD","tlshash":"c3b16d72b762d9d8c519e1f1da024ba2600d6e7b01bf9cc95f6d1d9119f4081cb813cc","first_seen":"2024-06-11T12:53:28Z","last_seen":"2026-07-23T13:38:34.356666Z","times_seen":286,"resource_available":false,"data":null}},"time_used":2315,"timings":{"blocked":1975,"dns":0,"connect":0,"send":0,"wait":339,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/resource/fonts/DINOT-Medium.otf","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ibkrgroup.cc/assets/index-099ee89f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Tue, 28 Oct 2025 12:04:17 GMT\r\netag: \"6900b141-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-30T19:44:59.551352Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":352,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/common/getCoinList","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T11:03:23.939595Z","times_seen":17723502,"resource_available":true,"data":null}},"time_used":2243,"timings":{"blocked":954,"dns":269,"connect":345,"send":0,"wait":332,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/vendor-2fc8d86c.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/vendor-2fc8d86c.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-d69e5\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":879077,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"98ee6902c64ed9fd6c2865b82faa4fbb","sha1":"68c263e1b3107e06f5128380a60a0cae1396c66e","sha256":"da3c4e25bfce818cd9749b250115e6f4595d827c316a04130387dfabe532108c","sha512":"7e1cc7104808f4e2c6c2ca7a7aff5a7e9f0ab614c767b4796f1ea48ccc26459b9d679fb0040841b46f08da9ed8246b08402abe6cd13bc2a6672886d61b844a93","ssdeep":"12288:Mv6NLEg6h1uVDwbV7VPY+L668W/LGDV2e8qwnWkOukKwaiVe:Mv65Eg1VUh7a+J/LGD8ownWkOukaiE","tlshash":"941528c97292f06147ab24e240bb0006f3396e59744e84a4f16d98db7d7ad89e277f3c","first_seen":"2026-02-19T15:44:21.81653Z","last_seen":"2026-02-19T15:44:21.81653Z","times_seen":1,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/common/getAllSetting","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:52.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12338,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c56ea6f0e7ba2a1eaffc7e04c82b678","sha1":"6cae6b969263721ce248d59f84e08c8617e0c5d7","sha256":"7a45319e4055f582396918ca11f4248f148d99dcbc387cfc2f76cb535cf71149","sha512":"080dfbcb30fb1d8664d5aa892a00aad30250470759a86084f4bdf7fc1483c174f25548dcbc3f298446138420babbe8b7770c09531132c82573215f2da649b3a2","ssdeep":"192:fPQKiztOFgQ1oQS+Rbrc2hcuI+EeiUgAjJR41kqqku32sK+MNcP2maKActjIjmvP:sgrZt2GMGP2znLY/","tlshash":"2a42644d33c8ccbda6c315e2a4967286b7ac3ca3a5d49c89f893ee0c8486775444f75a","first_seen":"2026-02-19T15:44:21.817919Z","last_seen":"2026-02-19T15:44:21.817919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/echo2.045ffd4805d4241df830f0c4bc8e53611.jpeg?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo2.045ffd4805d4241df830f0c4bc8e53611.jpeg?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9526\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBCE173EA3339B063DD\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"D9D9CB67A169AEEC99F6E579E0E6F173\"\r\nLast-Modified: Mon, 10 Feb 2025 07:58:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1733572323015903903\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2dnLZ6FpruyZ9uV54Obxcw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d9d9cb67a169aeec99f6e579e0e6f173","sha1":"030546ae8513b22feeba80dc197930c6ab04d473","sha256":"6d2679e6d3ecd1f9ea6d606c0f400ed70e226b1053c23ba974d09941db9d45ff","sha512":"5327fdb1886d58b239a18e839797d4ebc20d8c95201de2ab3594f4db685a1a4693bcf824f8dd04f901b9fb6350ba925d70be521b9558925b974c06abd60c6565","ssdeep":"192:mzJKlVSNtcaec79BDHte90p/GpNKtPshrv9VDdCRpdTN+FamhggRPtZ:msC4a/nDppGpFzdCRbNU/TZ","tlshash":"dc12beccccc58126a99b862370c2c48478ae78bd76bdcdce4049129a73c67c9ad9be45","first_seen":"2025-07-18T09:36:58.751131Z","last_seen":"2026-02-19T15:44:21.819221Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3655,"timings":{"blocked":3313,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/echo2.0212a79c7e4c84247996a0d8ec80a5b44.jpg?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:54.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo2.0212a79c7e4c84247996a0d8ec80a5b44.jpg?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 71908\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBC41CA943632C341CF\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"2FFADC341DCB9A87EAA12BC356FD2E36\"\r\nLast-Modified: Sun, 19 Oct 2025 12:48:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10521602243238373333\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: L/rcNB3LmofqoSvDVv0uNg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":71908,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x420, components 3","md5":"2ffadc341dcb9a87eaa12bc356fd2e36","sha1":"03a041fe334e0df24275bfabfd528aea0f18c68f","sha256":"5d3efb250b8c70b3f2db46fc4716fa841d9d66403fcc01c00f83a422edd10f49","sha512":"5d1962ee27d6d0684735e685d1e2f6bd91887900099efc6ffd605682214fba0590d343760c865c293e865a82531ef0447e84fabed6ca5ac814c9cc34ded88b00","ssdeep":"1536:aIBEacS+PXDTqdN3LIDV37irXdhXplQyHeExT0FK/:aDv1/nkNoQzPQVEd0G","tlshash":"666312040b7158a4e1797e35a0e1c0d2c516fed2bd76bf014034cf99d66ebec820adab","first_seen":"2026-02-19T15:44:21.820602Z","last_seen":"2026-02-19T15:44:21.820602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2910,"timings":{"blocked":2240,"dns":0,"connect":0,"send":0,"wait":345,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/common/getCoinList","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:52.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22807,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (22791), with no line terminators","md5":"5be54ac08aa9577bfb2612acd5453e55","sha1":"5750c0f8c45e993e71777ad936e5f842eb46db72","sha256":"c852cfce93ffa0375011b6e723859f33b877bda24297a27562e41c4a661626fa","sha512":"49116bf8c7a409c3ea460823179c458e0b5c769366fa751347c4c3ea79d38900192e96c683bf17a6200c43ba53d8dcea45cf860b5d77199b9b7b052eb3f703f8","ssdeep":"192:VXQdgX3FXTJXqnWXatXjwSX8v0Xg7XHDXlQSwLK7RzvZLxlIF4YfDrgOCKBnjRSc:Wh5Soj","tlshash":"14a23195652854bdc53ac0e22eaf7d1293dc356fe8c68e1ed6c94d488ed4fb4260bf02","first_seen":"2026-02-19T15:44:21.821919Z","last_seen":"2026-02-19T15:44:21.821919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/EURUSD.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/EURUSD.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 5038\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBAE173EA3339A35DDD\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"3FBA2E1BF30E1C7825FD6961F6FAE27E\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10078402448901278324\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: P7ouG/MOHHgl/Wlh9vrifg==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"3fba2e1bf30e1c7825fd6961f6fae27e","sha1":"33d22f34b057ce62f97e9cdf8fc0ca7de93ac371","sha256":"7f54a9d808fa97d250aba01cc9c468584da9ffcc8f6726863ab3e1e4810107f1","sha512":"6520a93a8bd3c54240c2a075a627cac9b9fb762d2cac21388e88bafbfc90ceebe1732fbb5ce05c529f29d582e7c3a852af6640b8c3c8b727570be1720b717db4","ssdeep":"96:EpdsuW/JbY9ODr+CRig3IaiqdRewn/mtL43TxYxOEqwLSrPxU510Lg7r:8s/hY90Db3tRewn4yTxBwLSzxU51/","tlshash":"72a15ef535d344ede9b28be76cfc81408939a3b70e55b268cb54b1d06385a109f28fa7","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-08-01T23:22:20.377452Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2891,"timings":{"blocked":1276,"dns":272,"connect":332,"send":0,"wait":335,"receive":0,"ssl":666},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-1e600a6a.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:48.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-1e600a6a.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-1845b\"\r\nexpires: Fri, 20 Feb 2026 03:43:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99419,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"b6cf4cf1750120c20b63cf88fe259146","sha1":"3bce956d43256d14dfe3daa1d11648321dd9149d","sha256":"845a613b73559d9f2f38bbb7a267ed213ba90f71ab4727fb3ee3b96c463f4582","sha512":"8e0a6b1b7e8910663adf0335a5713f59e5220f806ec15c07de6b7a3ff70c1820a608a2738992de03fb705da16fffff287be37914d52c7520b0b0976a379c868c","ssdeep":"768:wn6Hm/gUNGw1RrbPneHmbEUGA3WL2DReOEbgv+slQNDY+XZ2rYSCvf3Xr6Ohflem:0rsAroAVDZ4Y+p2Y9UzMDv","tlshash":"d2a33a8aa40b1fbf68be0844a94b595030690fd39c8dccd3b3ba6e1527fec94635971d","first_seen":"2026-02-19T15:44:21.824636Z","last_seen":"2026-02-19T15:44:21.824636Z","times_seen":1,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/resource/fonts/Arial.ttf","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:50.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ibkrgroup.cc/assets/index-099ee89f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Tue, 28 Oct 2025 12:04:17 GMT\r\netag: \"6900b141-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-30T19:44:59.556937Z","times_seen":2202,"resource_available":false,"data":null}},"time_used":1200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":607,"receive":593,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-ddeb13c9.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-ddeb13c9.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-1333\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4915,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4910)","md5":"b8d26940e2026acfdeb058fe92884fc2","sha1":"311b70e46253946d4fbfd32e3288a39cca911919","sha256":"e05d774d38f447b6f4efd42a25fcf537764c30fe53f511ce836762f389e7dccf","sha512":"66eddbd93bc171817d87fed6028b994de95f4a2acc25854f08da8727ddc86f110bb93579c5133626da421a1dbaad78f8b247ca446bc8c31118a98a455e260874","ssdeep":"96:I+7kcX1axeu09YANCqD+wNiZ/utboai7EMP3hvCC3L0eS/9D4qo3:zXX1axeuYYaCqiwNyutbtyfhvBdglo3","tlshash":"28a1b449fc02c9b9adb7548960580410318d7ff6b11848f2f3fe98496374ebae791727","first_seen":"2026-02-19T15:44:21.785135Z","last_seen":"2026-02-19T15:44:21.785135Z","times_seen":1,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.ibkrgroup.cc/ws/f9384526-d5a5-4478-a4b1-86442231093c","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"GET /ws/f9384526-d5a5-4478-a4b1-86442231093c HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ibkrgroup.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: OpuTKAZ+FvvBRRoGoqKHJA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Thu, 19 Feb 2026 15:43:53 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ibkrgroup.cc\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: luI7ooH812nXjKpfQZyratBNoM4=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T11:03:23.939595Z","times_seen":17723502,"resource_available":true,"data":null}},"time_used":3132,"timings":{"blocked":0,"dns":1041,"connect":1384,"send":0,"wait":346,"receive":8,"ssl":1384},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-0a7f0fe8.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:52.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-0a7f0fe8.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 510\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\netag: \"6900b151-1fe\"\r\nexpires: Fri, 20 Feb 2026 03:43:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"34f1855fcdcea85ba317f462e77240b2","sha1":"76499f3e4d71b89a5aa6169e9b87ac1402b32285","sha256":"2b7bf205b6effbb271c4bb95f3fa9c401709cd1d04f1ad62b8af6718b540f935","sha512":"795f97b19c2da96566edb8b2009099de37fee97fece1d821044575593cef86790205760bd90d3e7979cf214dc3c61541459b06ad4a66dedbda3b8ed5e4de2e94","ssdeep":"","tlshash":"64f00e3fb96b81721bb388aca2231820b61c1f262b50c5d8d58a0a14c7388e3e56e219","first_seen":"2026-02-19T15:44:21.781865Z","last_seen":"2026-02-19T15:44:21.781865Z","times_seen":1,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-bc011be9.css","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\netag: \"6900b151-18d\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-29T22:52:22.70849Z","times_seen":1464,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-643dc15a.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-643dc15a.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-2d2d\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11565,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (11562)","md5":"7df2be0f14f8e2b7572228c70504e641","sha1":"1c089b125b53dcafbc2b806486d6ab78813403c7","sha256":"2752ec45e95eb049950828afb9a91e97fcdd8fa3374ff5e38384f015efebe6bf","sha512":"5b68a22d240ae7025ae5b266febec998e26917f4eaedae3344133295688a553bdb13e17654cbef21834417cc5508ae55cb9a749a2c1248078253d362f11344a2","ssdeep":"192:QYBNPHTLH0jEYHOnc8MACffzcic5xzshuuwgveJNaGrvBx1i2e9MIeYYSyEZJC+g:QYB5Wqp2m5CuuwgveJNaGH1i2e/eYYS6","tlshash":"a73294a5f506aa3ce6bba00140c81050722a7fe7500d89e3bafc6d427767fbc7b1d619","first_seen":"2026-02-19T15:44:21.800404Z","last_seen":"2026-02-19T15:44:21.800404Z","times_seen":1,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/resource/svg/light/zu447.svg?2.0.1761653073861","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1761653073861 HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Tue, 28 Oct 2025 12:04:22 GMT\r\netag: \"6900b146-1a4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-07-28T19:28:06.581256Z","times_seen":462,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-099ee89f.css","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:48.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-099ee89f.css HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-4a6a7\"\r\nexpires: Fri, 20 Feb 2026 03:43:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304807,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"c3c03853e9eb60f30a8aa1e272fad66f","sha1":"56d90f9674394477804d084e0bde92c8d03a1858","sha256":"099ee89fa3a0006def2cab509579ae4d08b94f0123436c971bfb77d95b163ef8","sha512":"0d43a094828e411d73704eb6912a36a2d2c5364f9185502b313ddbd74ade40799043a36fc98d44ef6464ffd5107ff99d10250dbcf5676e71afd8182c524a1165","ssdeep":"6144:n+B/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05Tp:+B/54NZ8w71ZACkFDS3vyf58rBeV05Tp","tlshash":"b154d6a9a590517c6f27aa7597ce8ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2026-02-19T15:44:21.82779Z","last_seen":"2026-02-19T15:44:21.82779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1006,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/bitcoin.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/bitcoin.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBA41CA943632533CCF\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-05T06:09:04.996081Z","times_seen":25750,"resource_available":false,"data":null}},"time_used":2886,"timings":{"blocked":1277,"dns":281,"connect":329,"send":0,"wait":331,"receive":1,"ssl":663},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/XAG.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/XAG.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:56 GMT\r\nContent-Type: image/png\r\nContent-Length: 2529\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBC385D5B3431E4D6C7\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"A0A6E00AF7B14494616BD030518E4552\"\r\nLast-Modified: Sat, 15 Feb 2025 08:25:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7608553484274307565\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: oKbgCvexRJRha9AwUY5FUg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components 3","md5":"a0a6e00af7b14494616bd030518e4552","sha1":"69f0fbe82c630d55e02834f41bd21b26a2812400","sha256":"d65a77c83c74dd4a79026135658cf502446f5755d0dbb1741f1c52d5ce1b1513","sha512":"4349094b978569520997d74907c84156c149d69b6c9f736a32febabee136c8d79bc16e3d0ae65be717aeb9228535f56248667778509c372fc2ed9d73f8b4588f","ssdeep":"","tlshash":"84511a69ceb024d6ccb8c47da2f363a2ef963322ec8455a2d047119171372c06c9788a","first_seen":"2026-02-19T15:44:21.829778Z","last_seen":"2026-07-23T14:04:28.887387Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2952,"timings":{"blocked":2615,"dns":0,"connect":0,"send":0,"wait":336,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/common/type/defi_activity_type","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: th\r\nlang: th\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-07-28T19:32:04.761168Z","times_seen":800,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/common/getAllSetting","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: th\r\nlang: th\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12338,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c56ea6f0e7ba2a1eaffc7e04c82b678","sha1":"6cae6b969263721ce248d59f84e08c8617e0c5d7","sha256":"7a45319e4055f582396918ca11f4248f148d99dcbc387cfc2f76cb535cf71149","sha512":"080dfbcb30fb1d8664d5aa892a00aad30250470759a86084f4bdf7fc1483c174f25548dcbc3f298446138420babbe8b7770c09531132c82573215f2da649b3a2","ssdeep":"192:fPQKiztOFgQ1oQS+Rbrc2hcuI+EeiUgAjJR41kqqku32sK+MNcP2maKActjIjmvP:sgrZt2GMGP2znLY/","tlshash":"2a42644d33c8ccbda6c315e2a4967286b7ac3ca3a5d49c89f893ee0c8486775444f75a","first_seen":"2026-02-19T15:44:21.817919Z","last_seen":"2026-02-19T15:44:21.817919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/filters-e7434965.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/filters-e7434965.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-c1e\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"022698939fc9abc053e15f539daaf0a6","sha1":"d29d163c0f8bff82a18c6bcb41723a61430e7878","sha256":"d0e3b87180241f273484b0be543d6bdaa261f0592ba8579d8ef4434fbb5c2923","sha512":"377ab16f722ed359e622dace85bae2ff08116274e9d8d5b452f4fb17fc0651279fb9421c7793708bd7bb78396efc28b7f8de45943fe5c6a2850f27724107962e","ssdeep":"","tlshash":"0c5135fdfcc7a13356ea6ef940288454728eae20686e0a4df54fd0455933888e07f768","first_seen":"2026-02-19T15:44:21.809887Z","last_seen":"2026-02-19T15:44:21.809887Z","times_seen":1,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-009d41a9.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:52.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-009d41a9.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\netag: \"6900b151-308\"\r\nexpires: Fri, 20 Feb 2026 03:43:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"72a14a916bf17c770ac45743b324fee2","sha1":"15fa0dabec488a22a707b852a8098cd35a9b6c59","sha256":"761bc9e1312eeea173a19c23697119bcf0deaefc77b03ff5f43fe95e32a13c34","sha512":"781e902a6cc744178a8ef5e2593956fc513adcc819ac7efdfa176a2e2f85d3f2b60b8476c5d6608ffd6e38699a70436e6cdb3920fd92ef61eea1e46cf9f1dd1e","ssdeep":"","tlshash":"3801b8f9fd0d8ebb0ea20a4141913601140a2fddfa1419e298867d6a1be5950dbde72e","first_seen":"2026-02-19T15:44:21.831839Z","last_seen":"2026-02-19T15:44:21.831839Z","times_seen":1,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/resource/svg/light/zu29.svg?2.0.1761653073861","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1761653073861 HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Tue, 28 Oct 2025 12:04:22 GMT\r\netag: \"6900b146-348\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-29T22:52:22.73799Z","times_seen":934,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/da9bc5822529a2c225e057c0d8d50f36.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/da9bc5822529a2c225e057c0d8d50f36.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 12446\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBA9D920A3931D7EF78\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"DA9BC5822529A2C225E057C0D8D50F36\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5477238290917760361\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2pvFgiUposIl4FfA2NUPNg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"da9bc5822529a2c225e057c0d8d50f36","sha1":"82b82dcdfcdb456c30cd1901d162f6eda4755768","sha256":"f51f30797900cc0ba2647fad1078d29725f4410442a472df1812ae70d89e22d6","sha512":"c9c6ab97fd64a5d5901b3b97e3e2ff445588c37246abd20315c9f23496ba7040f6a14d0d95b5b0012cf7a30ac026ae818b16befef162330410d38810248b2ff3","ssdeep":"192:lF5DMISPEWXUxj4OcJTctXlli9mso8hM4CaD0ze/uCPuuzxd3iDPr:tMVEBxkO0TctXS9K4J/uCPB1ReD","tlshash":"93428df604472703f9bc1c97a3de061d18750f359251ee25d0ec1c5972a8aaf1bf606e","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-23T14:03:04.066999Z","times_seen":100,"resource_available":false,"data":null}},"time_used":2889,"timings":{"blocked":1277,"dns":270,"connect":332,"send":0,"wait":336,"receive":1,"ssl":665},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/common/getAllSetting","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T11:03:23.939595Z","times_seen":17723502,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/echo2.06a3f0ded3f5b4665932c88a2b5362c8b.jpg?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:54.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo2.06a3f0ded3f5b4665932c88a2b5362c8b.jpg?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 41828\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBC385D5B343175D9C7\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"9DD8391CEA8E91DCADD0A31FDE16F94A\"\r\nLast-Modified: Sat, 02 Aug 2025 08:31:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12581264861528541688\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ndg5HOqOkdyt0KMf3hb5Sg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":41828,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x420, components 3","md5":"9dd8391cea8e91dcadd0a31fde16f94a","sha1":"45dbe52ca37b943ece38f2b999465812fd55a754","sha256":"54201b9f5a2c490c35463bf9a5777cbc48bb1cf28afb4e6ca0a4047e4db2b330","sha512":"333b7a60da4e964d56db1c3f0796d76528165988d58764d589420c8f57ddc2072512aa52cdb3b88d35f7d5870ccf319913519a0352ef7cc99f0e2bd6b424134a","ssdeep":"768:1y1L14NGVyAhLWe7/e3A8i2aaoZcD5+WDhcb4Dt1n93E3Rwfv5nj4a38nFSMwzQy:k1L1lBLWeLe37i2aaoed+Qhcb4Z1nZ9N","tlshash":"7513f12885d71430ecb096ae883635241f0525cd65feeb3a306eb3bf631c4ba365be11","first_seen":"2026-02-19T15:44:21.834325Z","last_seen":"2026-02-19T15:44:21.834325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2851,"timings":{"blocked":2476,"dns":0,"connect":0,"send":0,"wait":348,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/echo2.036650ac8d3ac47a1b17afb1dc3e64979.jpeg?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo2.036650ac8d3ac47a1b17afb1dc3e64979.jpeg?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9526\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBC6B4B133133331AD1\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"D9D9CB67A169AEEC99F6E579E0E6F173\"\r\nLast-Modified: Mon, 10 Feb 2025 07:58:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1733572323015903903\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2dnLZ6FpruyZ9uV54Obxcw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d9d9cb67a169aeec99f6e579e0e6f173","sha1":"030546ae8513b22feeba80dc197930c6ab04d473","sha256":"6d2679e6d3ecd1f9ea6d606c0f400ed70e226b1053c23ba974d09941db9d45ff","sha512":"5327fdb1886d58b239a18e839797d4ebc20d8c95201de2ab3594f4db685a1a4693bcf824f8dd04f901b9fb6350ba925d70be521b9558925b974c06abd60c6565","ssdeep":"192:mzJKlVSNtcaec79BDHte90p/GpNKtPshrv9VDdCRpdTN+FamhggRPtZ:msC4a/nDppGpFzdCRbNU/TZ","tlshash":"dc12beccccc58126a99b862370c2c48478ae78bd76bdcdce4049129a73c67c9ad9be45","first_seen":"2025-07-18T09:36:58.751131Z","last_seen":"2026-02-19T15:44:21.819221Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4349,"timings":{"blocked":2940,"dns":0,"connect":0,"send":0,"wait":1409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: th\r\nlang: th\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":762,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6e65108264bee8e60fbb6ba60fdaf927","sha1":"c811b1c583d6d7cc20f137c564c1de540b0526e6","sha256":"331bace4a833d9aa863d362cb94b1d8d74defa843491c3798e0bdcbc050344ed","sha512":"ee431cc3e2e481faf49c98f8bfa8158a1d3fc6d298430080ad5c034782770b515e697c9ad94290c906c60db9864a4ce76b2c2fae1b4c1e89aa93bad56e537884","ssdeep":"","tlshash":"7b01903b2028cea81c0944c711c87ec8511d3a877ab0dcf0554edf1883f02760a16d81","first_seen":"2026-02-19T15:44:21.835655Z","last_seen":"2026-02-19T15:44:21.835655Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-b4e56ae2.css","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-b4e56ae2.css HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-d54\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3412,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3411)","md5":"55543f2e32336620f958ee58fd4d4c01","sha1":"240049a783329d39c92bc6556d8abd0d9c6b70db","sha256":"b4e56ae2f7ccb6618d6e678925569eafc99bee370ca33962b33543a69b79fb95","sha512":"e1c9c06753a6794a1ed29156bf6df100bc9786acab52848f8fcfb1a715a16665312f6a46ca947c1c2a69ecfd7c43082a118cce6afe5cfa2ed9c6d961018ad6c7","ssdeep":"","tlshash":"1361431cf75815389e37d98b6f9d9e488020af81e487dd8af153d3070adf6a31729349","first_seen":"2026-02-19T15:44:21.836879Z","last_seen":"2026-02-19T15:44:21.836879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/resource/svg/light/mengbanzu12.svg?2.0.1761653073861","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1761653073861 HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Tue, 28 Oct 2025 12:04:22 GMT\r\netag: \"6900b146-322\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-29T22:52:22.742379Z","times_seen":983,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/tron.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/tron.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBB385D5B3431E8D3C7\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"D5CA5F90C7A46CB88E5F57B2D3046BA8\"\r\nLast-Modified: Sat, 15 Feb 2025 08:25:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1cpfkMekbLiOX1ey0wRrqA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.550492Z","times_seen":713,"resource_available":false,"data":null}},"time_used":1957,"timings":{"blocked":1597,"dns":0,"connect":0,"send":0,"wait":348,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/bluzelle.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/bluzelle.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 25833\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBB6B4B133133D415D1\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"D00EFBBDFD298720E829AE2434E8300F\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8445431794217583994\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0A77vf0phyDoKa4kNOgwDw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25833,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d00efbbdfd298720e829ae2434e8300f","sha1":"5ce11234597ef8050d23bc55f1bf48d4a1152451","sha256":"f42a835f279c3889d4384579c4c6a3688442b7f1c8df12fd3fa4b3741ce140a7","sha512":"6d2425cd1c13c3b83701c51c2afee6c08449c491422f3613f956025e1623993c78d242d4dbeaca645f298d7fee413c9268374dfcfe0766890027eb5c796ef3b7","ssdeep":"768:3EMrF5XvEfBimA9K2mX7VDsJHCf96WOdkKCbjGO0hb:3VR5XEBimAQvGicWqCbp0","tlshash":"72c2e0aed8d8c48878afaa3179d5c071d7b5e9bee9717c2271ce843319507071c0e9b8","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:29:08.853577Z","times_seen":118,"resource_available":false,"data":null}},"time_used":2625,"timings":{"blocked":1607,"dns":0,"connect":0,"send":0,"wait":1017,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/NZDUSD.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/NZDUSD.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 4883\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBB385D5B343196D5C7\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"02B89264B26D3A3507E8E99725D789A8\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11703578833927796243\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: AriSZLJtOjUH6OmXJdeJqA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"02b89264b26d3a3507e8e99725d789a8","sha1":"661c601f315d6032aa3a437346ab8cccb11452f7","sha256":"ca39637a1c539a0aaaf7c6d19f197213fc6a88dfb713f6bfb5e9daa68ba1bd9a","sha512":"b6552591602e066d5effad94de93c564aa815bf5f0ca2d0a9918e60b59f75b54f32644f4e98458a649cc3e97abe2c324f4fbdc7580db3c6222a8c04c57a85111","ssdeep":"96:7BjtHONS/9HuLfUVe5apNLzGmTEHsDT0TlowP7:7BhHO4/2fUc4NLz/cOgP7","tlshash":"92a17ddbecf89e02366c5c68239336780cffd5382ba099676177440bb19c55d744aa9c","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-08-01T23:22:20.424833Z","times_seen":24,"resource_available":false,"data":null}},"time_used":2622,"timings":{"blocked":2285,"dns":0,"connect":0,"send":0,"wait":336,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/USDJPY.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/USDJPY.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:56 GMT\r\nContent-Type: image/png\r\nContent-Length: 4132\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBC6B4B133133BE18D1\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"46C9B63C0D6090A4B49CDE0B6776A158\"\r\nLast-Modified: Sat, 15 Feb 2025 08:25:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6955475850463209403\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Rsm2PA1gkKS0nN4LZ3ahWA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"46c9b63c0d6090a4b49cde0b6776a158","sha1":"4cabbbcd21455ab7688d0624589eac165e698403","sha256":"8bd2097f6bc3eec42fa93d515e7e8ca5426234322bd78692cbc668daea545f05","sha512":"47a6e692a4d2132db588d16c32116a26b27d888a32198ab5624ab46c8af0c4730c205a6bcc3912704493ad04a293fe5187105189de8d0d4e6ff5b83e23cd06a9","ssdeep":"96:IYEYW7qLzoPqtYxE0opyEDU/FU5Tm4sHikpfrM:3EYloPqOxcpf40Tm/ZpzM","tlshash":"c8817eb5a3300a71cb25a275ee27275ec563b61540651e253b5f790f650222e7033bff","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-08-01T23:22:20.428649Z","times_seen":24,"resource_available":false,"data":null}},"time_used":2949,"timings":{"blocked":2611,"dns":0,"connect":0,"send":0,"wait":337,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/resource/fonts/DINOT-Regular.ttf","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ibkrgroup.cc/assets/index-099ee89f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 46828\r\nlast-modified: Tue, 28 Oct 2025 12:04:17 GMT\r\netag: \"6900b141-b6ec\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-30T19:44:59.521415Z","times_seen":344,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":335,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/charting_library/charting_library.min.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:48.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b13f-2a6b\"\r\nexpires: Fri, 20 Feb 2026 03:43:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-29T22:52:22.712247Z","times_seen":1299,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-009d41a9.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-009d41a9.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\netag: \"6900b151-308\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"72a14a916bf17c770ac45743b324fee2","sha1":"15fa0dabec488a22a707b852a8098cd35a9b6c59","sha256":"761bc9e1312eeea173a19c23697119bcf0deaefc77b03ff5f43fe95e32a13c34","sha512":"781e902a6cc744178a8ef5e2593956fc513adcc819ac7efdfa176a2e2f85d3f2b60b8476c5d6608ffd6e38699a70436e6cdb3920fd92ef61eea1e46cf9f1dd1e","ssdeep":"","tlshash":"3801b8f9fd0d8ebb0ea20a4141913601140a2fddfa1419e298867d6a1be5950dbde72e","first_seen":"2026-02-19T15:44:21.831839Z","last_seen":"2026-02-19T15:44:21.831839Z","times_seen":1,"resource_available":true,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":756,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/currencyItem-43495e5f.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/currencyItem-43495e5f.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-4b6\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"98b6968492509a1a79317e10fa2b7c4c","sha1":"8fbabe78a7b9e7d04d352c3c2956827d1c95c85c","sha256":"a5998d8b05699a6394e0200204a91160d8e0cb11ea648dfb95d3435692470d11","sha512":"bdbf284526c9457379c4c95e4ed72ca5244208e2139d39451a7de0f2ab14aa26be5114aaf3af9f3139391052270822f90fa828dc08fc660ca03073a4ad2a971d","ssdeep":"","tlshash":"2a21df9aa902c7b1cbbe546281bd5414130d7bea701185c5ebed148a3b8a9fcd728a31","first_seen":"2026-02-19T15:44:21.811355Z","last_seen":"2026-02-19T15:44:21.811355Z","times_seen":1,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/platform/dev/logo_144.png?2.0.1761653073861","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:52.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1761653073861 HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Oct 2025 12:04:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b141-b5c\"\r\nexpires: Sat, 21 Mar 2026 15:43:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"9a5a67a3b984ab223eef25ac3f419432","sha1":"5b07513414db526d86d32c3b8f42c0dbb62a8e71","sha256":"38055609c5d61aad696e97b746489c7f886b79cc069326312c6a111062019777","sha512":"4f610ac72700d9727ff6d32567b7d71a582a8c87eb067e4f33a8a910c66968514277df68c0794d1db6ce3a94ed0111003a71afd8cab40dcb3bc062dfb9f14bad","ssdeep":"","tlshash":"0c5119e6d89d003a4dd329b7b0f03e45fe7ab5fb5ab6330480972b3065552ab84d8327","first_seen":"2024-10-20T08:32:52.883488Z","last_seen":"2026-07-27T07:09:42.371921Z","times_seen":296,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/binance-coin.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/binance-coin.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBA385D5B34311DD3C7\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"A533EECDEE5A789E7D94F8F79F95D588\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18158548296662870332\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pTPuze5aeJ59lPj3n5XViA==\r\nx-oss-server-time: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-08-05T10:02:24.585252Z","times_seen":926,"resource_available":false,"data":null}},"time_used":2888,"timings":{"blocked":1276,"dns":268,"connect":331,"send":0,"wait":344,"receive":1,"ssl":664},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T11:03:23.939595Z","times_seen":17723502,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/platform/dev/config.js?1771515831073","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /platform/dev/config.js?1771515831073 HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Tue, 28 Oct 2025 12:04:17 GMT\r\netag: \"6900b141-18a\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"1e99ce5275da860cad38ba29e1562838","sha1":"b55df4a39f2ffe442432bcafc2e48ce8ce9198ae","sha256":"810c94e83355f3fb7c8da88bdecb8ea447bb955627f4ff2cbc1b36e02a1dc941","sha512":"5c6416f30fdb6d350b3b71097a5214274b62877639a63aae14f8554e8af2109729934a1dbd1bdf8b74d180270a095c9b386c8fe2fd517f760f9c6f121baa6791","ssdeep":"","tlshash":"e1e02b936c29d5ee1c394b9aa8dd19a1a8692f3bc424451f306465605eb64009f68da8","first_seen":"2026-02-19T15:44:21.846893Z","last_seen":"2026-02-19T15:44:21.846893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/coinInfo.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/coinInfo.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 55728\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBBE173EA3339055FDD\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"48384A67185DBDFEEF3AA43C99D3319C\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3192987439189544564\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SDhKZxhdvf7vOqQ8mdMxnA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-30T19:44:59.567355Z","times_seen":915,"resource_available":false,"data":null}},"time_used":1985,"timings":{"blocked":1597,"dns":0,"connect":0,"send":0,"wait":346,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/GBPUSD.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/GBPUSD.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 4410\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBBE173EA33397361DD\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"08CC62173BECD89C4FB8869BF74A44F5\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14124813277019884416\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: CMxiFzvs2JxPuIab90pE9Q==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"08cc62173becd89c4fb8869bf74a44f5","sha1":"19012b5b4fb20cdc0b5e6264c02ead82665a7c48","sha256":"9d2c8d3fd13ea6183703ee47138efb4e7eee2674b86ea9a4547d28039010dcc2","sha512":"d4a1b1c9d3e687098a39d1738d14d48533f391ef86354f7fbb246ffa90145bbc3df3c3240c5eb4a5a122e424dfe65be34625b2de2a9dbcf9cbe21e661777efc9","ssdeep":"96:jPz8Q1ZoWYUucPXceioggaLqDDXka+85b2bQGmhR7Mq7tdYWXIy:jpZoWdB/hggKq8a8QGmhR7htdYWXD","tlshash":"f4917e9b53348115bd0bd621070730b687a6b98b95d93a36fb8f1dfc352581395ec610","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-08-01T23:22:20.407373Z","times_seen":24,"resource_available":false,"data":null}},"time_used":2643,"timings":{"blocked":2308,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/GBPJPY.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/GBPJPY.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:56 GMT\r\nContent-Type: image/png\r\nContent-Length: 4936\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBC9D920A393102F578\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"8D8A21E0D7915C8096282DECFC197A36\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6464999396359261641\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: jYoh4NeRXICWKC3s/Bl6Ng==\r\nx-oss-server-time: 12\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"8d8a21e0d7915c8096282decfc197a36","sha1":"9b82491101cbfa3b92768f08c73de0f7a8f07847","sha256":"3ecf56565ba9bcc5874cc67c416a0a870ea56819dd1eb5d65d6c704707713dec","sha512":"911605a1654252ca5693e234d7eb6fa5ce8be02da9c8022e9c000000ef2cd6c782ae400b5c09ce976ae7b92b0d881a07a51456c051f932ec3d88ea507a75281a","ssdeep":"96:Q0Gk2o26fDPpoEnzUdN21BroJPVfBOlBTdvhTqJFqshJFFfTzy8R:QVkjP9wa1BoZBWZhTY0i7fTjR","tlshash":"46a17e7285c6dfb1062fa89753d314b882fe42a205052ca834c5f08865ff514d8fb839","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-08-01T23:22:20.414059Z","times_seen":19,"resource_available":false,"data":null}},"time_used":3818,"timings":{"blocked":2726,"dns":0,"connect":0,"send":0,"wait":1092,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/echo2.00105fa5c847941a6bce6d9c0c59ea3a2.jpeg?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo2.00105fa5c847941a6bce6d9c0c59ea3a2.jpeg?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12816\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBCE173EA3339DF62DD\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"56218E4BCB918B52A51770B686018444\"\r\nLast-Modified: Mon, 10 Feb 2025 07:59:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14387893976716132693\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ViGOS8uRi1KlF3C2hgGERA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12816,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"56218e4bcb918b52a51770b686018444","sha1":"cd07708d5620dc05bdc7573c8cfc24d097413156","sha256":"03758153da47a84fd31b7835f038de7c5e7865b0aa7626d02c599cec63ef27ad","sha512":"316d184e103870381c129819129f18b7ee32c76850c41f7a2c27fbcbf0d854c98b511e8cf1f67efa51f0cc2af17381d4c155a0df4958e94cba483765c0ab7af1","ssdeep":"384:bQoHr7rQkQIXvrOUjEvzXpLLEG8SwhL1HWUc:bQcrJQCOUgzZLIG8SwhxHWD","tlshash":"5442bf8d7d996ed9d2b268af45808c69e3b1272c01f6bd98cea54438b701db1cc39b53","first_seen":"2025-07-18T09:36:58.753038Z","last_seen":"2026-02-19T15:44:21.796842Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3309,"timings":{"blocked":2963,"dns":0,"connect":0,"send":0,"wait":345,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/HalloweenVideo-6154a612.mp4","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/HalloweenVideo-6154a612.mp4 HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 12907703\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\netag: \"6900b151-c4f4b7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-12907702/12907703\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12907703,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"300b4e0018d318aaff2e5c23ee3c3586","sha1":"508ad4ccbccf4cfca241bb54378ac130cf1b33ca","sha256":"1b257ed1b75582421f185395d592cd1d6990f5d1c76ebc7657bb3afea99c5b0e","sha512":"77fbe4c56100bb07bd05a87f8acbdbecdae37759791832a427d290199a7e2aca962aee0393bdb262fb9d1211d707543f7c6cf8fc8302a56e06baede35666a79d","ssdeep":"24576:S7I3Y/NUE/I47ll+8sEV1y1Rq8KdztyOzOX+Gp5zZyIFsNizyGARXohbx:XWN7g47l8g21QhyOaX+Gx5Q5GARXoht","tlshash":"2b2523507735662bda40223881de43943bb8e0743b2b974fb69e863cbf867d48c967d1","first_seen":"2026-02-19T15:44:21.851954Z","last_seen":"2026-02-19T15:44:21.851954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8385,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":336,"receive":8049,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/waihui/AUDUSD.png?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /waihui/AUDUSD.png?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 5053\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBA6B4B133133C614D1\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"EE074F44C936E272A3D7D491980CEDF9\"\r\nLast-Modified: Sat, 15 Feb 2025 08:26:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7438715652877179360\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 7gdPRMk24nKj19SRmAzt+Q==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5053,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"ee074f44c936e272a3d7d491980cedf9","sha1":"772308b750f40c6f2cc68d77a54c90b39318d3e4","sha256":"550981a424a9ce822e4f864eb7b9b1442ced5a57718f21fc4711b624d936df8f","sha512":"f2e07bc7557830a7a6f71f62fa2c34a0a2ac5f793beffe0007d552d9830e5dbe0a8f63e7b1f3fba6c1d80f4d88d0563b0269aedc07e8a9235a7315c88019abb1","ssdeep":"96:d6kkvv5yuoXi3NLY0EHZbezTDhBWsRQafgowKIEXkrEzOuWO5qtrDiTIm+YWnpRp:MvxQXwxY0ERezT98kjoLKhaf9tsImRWF","tlshash":"82a19ee629219246a5693a7f22bd85dccfe270550e0e8551ff0cf93530b9b464fd2d0b","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-08-01T23:22:20.422364Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2904,"timings":{"blocked":1281,"dns":265,"connect":342,"send":0,"wait":343,"receive":0,"ssl":669},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/index-c202e80d.css","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/index-c202e80d.css HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: text/css\r\ncontent-length: 104\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\netag: \"6900b151-68\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"30248ec55ad9fb7157815a9a7c3b5824","sha1":"b3f0988531ce2389fc5786569ef0eb5ab6649983","sha256":"c202e80d49167cdf46ff9eb7486428a39c40da3f001ad0ee499307057ca6ec03","sha512":"4be7cb9aae741d31cca244d5ec34051aa3563fb130866c2e0312816f246486c3d14afb40ab6364b31199795db29576213c65e45192926802526b88738904e8c0","ssdeep":"","tlshash":"a8b01236796c9300da31c661b28fccc5a2c6e368df611015bbc6fc445705c00bc60386","first_seen":"2026-02-19T15:44:21.855169Z","last_seen":"2026-02-19T15:44:21.855169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":770,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/currencyItem-15550dda.css","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/currencyItem-15550dda.css HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-6d6\"\r\nexpires: Fri, 20 Feb 2026 03:43:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"0a88af6b4dca3c130c74addeb274fb10","sha1":"fb0c4b8a0f7b7c4bac8e193999f99b4070ffcfad","sha256":"15550dda13edd7fe55a2d29edacb7ba57f23f39ef10d087669c0f75facae0763","sha512":"5d046b442f0f471b2063fcd34fb68b1d95b79647ec7e50cf5290ebd866febcd12e9b890a1784512959c4f4a433d3f31d57540254b4e0abbb6f55dc7773677619","ssdeep":"","tlshash":"ed31c05457110375da3bc8866ea8010dc0d47fd1901765cae8afaa2b2ccfa931b7096b","first_seen":"2024-08-19T15:53:11.157884Z","last_seen":"2026-07-28T19:24:50.808886Z","times_seen":420,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":762,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/platform/dev/favicon.ico?2.0.1761653073861","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:52.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1761653073861 HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 10599\r\nlast-modified: Tue, 28 Oct 2025 12:04:17 GMT\r\netag: \"6900b141-2967\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10599,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"e400fafbd747742bc693bfc788a95d8b","sha1":"53137bb1115c1cf83757bf943b9d2255df2c62c5","sha256":"dbf1ea21cd3abbb43b46ffd5e47920fa090cc5b9701c1b6a910e2bdef359c1c9","sha512":"428186c081bf72e5ec702092d7adb26f3d9270a746febe2c926d96f92e5834c506cc56c3f934ba204ccd03b191e4647874a7d59b56360b48fe14bc5ade3a43bc","ssdeep":"192:6cOcZ/0BAUupju+uDpQQXs3kRxQcJmo6I6NP1faN3hhMWH7ec3UNLH9tgGiOf:JqWcj8UR+bP1fad/MWH7X3yj9yGR","tlshash":"1e22be2d1cd6d19eaebd07ed48d3620c54344e0c921af0eda6120a37e0e15b93eb690f","first_seen":"2026-02-19T15:44:21.804101Z","last_seen":"2026-02-19T15:44:21.804101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conversation-data.oss-ap-southeast-1.aliyuncs.com/echo2.0af8a7435cf3a45e98aa725c2c0fac373.jpeg?2.0.1761653073861","fqdn":"conversation-data.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.228","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo2.0af8a7435cf3a45e98aa725c2c0fac373.jpeg?2.0.1761653073861 HTTP/1.1\r\nHost: conversation-data.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 19 Feb 2026 15:43:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4344\r\nConnection: keep-alive\r\nx-oss-request-id: 69972FBD385D5B34318BDAC7\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"6A530C54F288C7F0AE54D3C44842F96C\"\r\nLast-Modified: Mon, 10 Feb 2025 07:58:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9896063616710891509\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: alMMVPKIx/CuVNPESEL5bA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"6a530c54f288c7f0ae54d3c44842f96c","sha1":"9dcc2b4b389ee7257ea37703a7b3e9e841a3e243","sha256":"fbc766f17318548e9785f101ac1397898f2a468ddb28b8316dda956076b1f9c5","sha512":"e8fab73a4039be7367ffce7a4c1f79a46f268d3a6a0e1b59c449e072aecd8d377d992e6ea45101a00934b37046de8ea8fe13704362e93ff57277b1fa27da8946","ssdeep":"96:4g3p2FCtZZcyj1UnScsmV8M7gk2AsJ0a1tsb1ODoZ/Oc1JFr:4op2YTZcZnSchXMkzW0v1a89p","tlshash":"c9914ce39331b7d9119f192f393a2c291a62003516140b75aab7e25ec1e8e29c3257df","first_seen":"2026-02-19T15:44:21.807683Z","last_seen":"2026-02-19T15:44:21.807683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3990,"timings":{"blocked":3654,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/common/type/defi_activity_type","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:53.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:53 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T11:03:23.939595Z","times_seen":17723502,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibkrgroup.cc/assets/vendor-2fc8d86c.js","fqdn":"ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:49.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibkrgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:11:43 GMT","end":"Fri, 01 May 2026 19:11:42 GMT"},"fingerprint":{"sha1":"84:0F:F6:DA:40:0F:03:95:16:7F:3F:2C:5B:CA:5C:78:6F:03:F9:32","sha256":"15:21:F8:1A:C7:97:96:E8:13:D4:48:85:B7:EA:81:9C:97:6E:5B:E8:B2:C6:75:70:50:83:3E:FD:6B:29:A0:48"}}},"request":{"raw":"GET /assets/vendor-2fc8d86c.js HTTP/1.1\r\nHost: ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6900b151-d69e5\"\r\nexpires: Fri, 20 Feb 2026 03:43:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":879077,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"98ee6902c64ed9fd6c2865b82faa4fbb","sha1":"68c263e1b3107e06f5128380a60a0cae1396c66e","sha256":"da3c4e25bfce818cd9749b250115e6f4595d827c316a04130387dfabe532108c","sha512":"7e1cc7104808f4e2c6c2ca7a7aff5a7e9f0ab614c767b4796f1ea48ccc26459b9d679fb0040841b46f08da9ed8246b08402abe6cd13bc2a6672886d61b844a93","ssdeep":"12288:Mv6NLEg6h1uVDwbV7VPY+L668W/LGDV2e8qwnWkOukKwaiVe:Mv65Eg1VUh7a+J/LGD8ownWkOukaiE","tlshash":"941528c97292f06147ab24e240bb0006f3396e59744e84a4f16d98db7d7ad89e277f3c","first_seen":"2026-02-19T15:44:21.81653Z","last_seen":"2026-02-19T15:44:21.81653Z","times_seen":1,"resource_available":true,"data":null}},"time_used":642,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.ibkrgroup.cc/api/common/getAllSetting","fqdn":"webapi.ibkrgroup.cc","domain":"ibkrgroup.cc","tld":"cc"},"ip":{"addr":"45.207.194.25","port":443,"asn":142032,"as":"High Family Technology Co., Limited","country":"Mauritius","country_code":"MU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ibkrgroup.cc/","date":"2026-02-19T15:43:51.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.ibkrgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:11:43 GMT","end":"Tue, 31 Mar 2026 19:11:42 GMT"},"fingerprint":{"sha1":"4D:FF:D5:FB:55:76:A2:6C:0E:91:5A:95:41:18:71:E8:28:E5:AC:10","sha256":"D0:7B:23:25:A5:5C:E1:E5:61:A3:20:9A:54:D3:7E:AC:61:12:FB:2C:67:3A:22:C0:BC:57:17:C3:63:74:6A:D9"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.ibkrgroup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://ibkrgroup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:43:52 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ibkrgroup.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T11:03:23.939595Z","times_seen":17723502,"resource_available":true,"data":null}},"time_used":2265,"timings":{"blocked":966,"dns":271,"connect":341,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"webapi.ibkrgroup.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}