{"report_id":"259ab73d-dfa2-4b7a-b12d-6c467bea8ad3","version":6,"status":"done","tags":[],"date":"2026-04-22T18:27:28Z","url":{"schema":"http","addr":"ydfc2026.top","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"title":"Huobi","dom":{"size":109004,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52128)","md5":"7383b60b2baf414bf22d82fe943c4f95","sha1":"92242b4a1550645e97f4c99d3c63f3db31c251b2","sha256":"bf0616c5b90bf3bf10dd6517ffbd7b7c9f82f23005fcc0035891ace712a9257a","sha512":"fa951f07583ef035f8dcf237fd70a83652a8c7caa515ae4b29e94f71eacfcf40b8c840cc4266d314ee7405f38821bd039b8286dbe38957fa50b13aa0fddc8f91","ssdeep":"1536:rSZcAU+wxFaPSXFDIiF7mcx6wkZZIRZuh/6OjNueTHuhDRIjP9ENODitfXD8+2Ps:GpRIE/65RsV6iMf4+gXQGi","tlshash":"77b3b7b497e5047c980b92d99b21595937bda8aff942c9147aad0f90bf43e4ccb038cd","dom_hash":"domhash46fabf9130dfdc105d23b0dcd9c6eba7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ydfc2026.top","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T18:27:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ydfc2026.top","ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-04-20","domain_rank":0,"first_seen":"2026-04-22T18:27:29.129715Z","last_seen":"2026-04-22T18:27:29.129715Z","alert_count":0,"request_count":45,"received_data":3814723,"sent_data":26160,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:2.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-19T22:35:51.253585Z","alert_count":0,"request_count":3,"received_data":331423,"sent_data":1530,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.staticfile.org","ip":{"addr":"202.181.25.20","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2013-03-29","domain_rank":851278,"first_seen":"2013-08-23T08:51:19Z","last_seen":"2026-04-18T10:11:58.126269Z","alert_count":1,"request_count":1,"received_data":84867,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"ef5f609b8c44a10e1d2d43eb87780e14","sha1":"10d971461158bdf03cc42905b94bbc9e4cc76483","sha256":"6a7a983aa9d59b421dd7b097d25fc42654dbb6c6ec065126def1034e9a7a63e8","sha512":"e03d1619ffbcd27e5915fcaed89cd1d95b423e9b64a39d1469455aaa51c3473b04427f660c62058576504da81ab5160fbaa80b092d0a7b7d10e5bde218ebb2c9","ssdeep":"","tlshash":"89210080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1137,"data":"","first_seen":"2024-08-19T14:11:10.419333Z","last_seen":"2026-05-11T12:45:12.759643Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"ef5f609b8c44a10e1d2d43eb87780e14","sha1":"10d971461158bdf03cc42905b94bbc9e4cc76483","sha256":"6a7a983aa9d59b421dd7b097d25fc42654dbb6c6ec065126def1034e9a7a63e8","sha512":"e03d1619ffbcd27e5915fcaed89cd1d95b423e9b64a39d1469455aaa51c3473b04427f660c62058576504da81ab5160fbaa80b092d0a7b7d10e5bde218ebb2c9","ssdeep":"","tlshash":"89210080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1137,"data":"","first_seen":"2024-08-19T14:11:10.419333Z","last_seen":"2026-05-11T12:45:12.759643Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"4dce3ba96087ecdd42326cc31ec889a9","sha1":"4872f6d8a6fca00e92175fb9ed64968ce2fbcce6","sha256":"27d0441015b3aef7a128dfe44d4964e8bdb183c7dbff7dd18ae2f07a972bd6c5","sha512":"37fa4815a151f3239787cb68585e4513db465f55d4441476432d4cf15c5dfcacab51ae39a1e3f2001271208668e10311c6f0e1aab5812f0da692918bc2003c15","ssdeep":"","tlshash":"87210080c8000c00808000b82c82003020202020c00080000800808022080028a0080a","size":1145,"data":"","first_seen":"2024-08-19T14:11:10.420799Z","last_seen":"2026-05-11T12:45:12.765487Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"d1ae69e11abd1ce51ba8b7e5548fa646","sha1":"c0df669637ffa0a2b4a60e5123694ee1d5df2fa9","sha256":"f7b13ef234254f15629cedf981dc2f906820b663bdbfc8f6767699e59cf0618d","sha512":"6ef70cfe6ae56a1d1848c75497c881cb716f69465b63e6cda2cc432146764ae0c6615e417e4fc77c21bf26b38cf045cac235c061cdd11b7514ebeb0385894681","ssdeep":"","tlshash":"052100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1141,"data":"","first_seen":"2024-08-19T14:11:10.415315Z","last_seen":"2026-05-11T12:45:12.761661Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"23859097fab6a00b364924356f651e64","sha1":"bb03b83726a91b2f11841d61be69ab84ea9a0608","sha256":"aa5e6a8d1a372c8d2d96cf01e4c13835e4bc3bbc81280d02e85e7b422bd6fce5","sha512":"4dbbf8ed0277e5d3771efd94b0113f9b17c3e635767eb3f4069caca1e2684bb3fe285fa0d1c00441d07978ccb8770636e5530b16bf85ac8fc2dc786ea4653262","ssdeep":"","tlshash":"d101ac850d1709c8380d44780f9839c730b3112b4ba8d9847f7d63845fd5e99259d3f3","size":764,"data":"","first_seen":"2024-08-19T14:11:10.418585Z","last_seen":"2026-05-11T12:45:12.757716Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"85ffacf23e26c18898c10a6b489e739c","sha1":"26d5a83db6ca0158c087dff626f846d87e5e53cd","sha256":"c15e140d25c09bcc7190b9c1ebf065bc3e8d946bd01f22c66129daa5e9e14996","sha512":"e1df005a5775e60a0c3a85007c1c79dae671d6625c8a783c57bce44ea97a0a2fdfed5524f8537358884dffa6431f47eaf8996b49bfd3c2741592f576df6480cc","ssdeep":"","tlshash":"982100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1139,"data":"","first_seen":"2024-08-19T14:11:10.414388Z","last_seen":"2026-05-11T12:45:12.758619Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"85ffacf23e26c18898c10a6b489e739c","sha1":"26d5a83db6ca0158c087dff626f846d87e5e53cd","sha256":"c15e140d25c09bcc7190b9c1ebf065bc3e8d946bd01f22c66129daa5e9e14996","sha512":"e1df005a5775e60a0c3a85007c1c79dae671d6625c8a783c57bce44ea97a0a2fdfed5524f8537358884dffa6431f47eaf8996b49bfd3c2741592f576df6480cc","ssdeep":"","tlshash":"982100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1139,"data":"","first_seen":"2024-08-19T14:11:10.414388Z","last_seen":"2026-05-11T12:45:12.758619Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"4cd653a1f9739a4aeba28cd2de0c6216","sha1":"a0ed045a6cd8d294732f4e14e622e58519e2b33e","sha256":"92a8901a3960d234cb10b973d29f1c4170042a6cdd7c86df0f101c332b8c80d7","sha512":"d44386c2a5d932463fbdcfd5a4643cf9b9d22949ed51d8aa6e1c261886562457e98e2fa533154916e5b1471842398d46e7acf307e66baa6291a124f3a6d0223a","ssdeep":"","tlshash":"17210082c000082880a000380c82000020200000c00280200c0880e000280228002c08","size":1151,"data":"","first_seen":"2024-08-19T14:11:10.422177Z","last_seen":"2026-05-11T12:45:12.760943Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"ef5f609b8c44a10e1d2d43eb87780e14","sha1":"10d971461158bdf03cc42905b94bbc9e4cc76483","sha256":"6a7a983aa9d59b421dd7b097d25fc42654dbb6c6ec065126def1034e9a7a63e8","sha512":"e03d1619ffbcd27e5915fcaed89cd1d95b423e9b64a39d1469455aaa51c3473b04427f660c62058576504da81ab5160fbaa80b092d0a7b7d10e5bde218ebb2c9","ssdeep":"","tlshash":"89210080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1137,"data":"","first_seen":"2024-08-19T14:11:10.419333Z","last_seen":"2026-05-11T12:45:12.759643Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"85ffacf23e26c18898c10a6b489e739c","sha1":"26d5a83db6ca0158c087dff626f846d87e5e53cd","sha256":"c15e140d25c09bcc7190b9c1ebf065bc3e8d946bd01f22c66129daa5e9e14996","sha512":"e1df005a5775e60a0c3a85007c1c79dae671d6625c8a783c57bce44ea97a0a2fdfed5524f8537358884dffa6431f47eaf8996b49bfd3c2741592f576df6480cc","ssdeep":"","tlshash":"982100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1139,"data":"","first_seen":"2024-08-19T14:11:10.414388Z","last_seen":"2026-05-11T12:45:12.758619Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"a56d7c1af6da006950d33ab7f245bc35","sha1":"cbf186f99c061f089d49a083502664ff72039da5","sha256":"318c8d7d3f3464df9a77fe08dae801bfe3dde45a48fdb5414b509f6f635b751a","sha512":"cb9d25619c1e7bb2157cfb53ceecc3fdd5b10f2baf5f1ae9f77eca91eb40ba265ca2063d875091fc1d8419f409115ab53f1f6619107aff5f15cfa1e77912064c","ssdeep":"","tlshash":"4a2100c0c0003c00c0c000fc0cc00000f0300000c0c0c0300c03c0c0c00c003c03cc0c","size":1147,"data":"","first_seen":"2024-08-19T14:11:10.421483Z","last_seen":"2026-05-11T12:45:12.763618Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"7a3783aec522cff19204f62881e43c57","sha1":"cf51e5470a27f0ca072d50a33a7a986887c57b96","sha256":"da688da9cb095c180f35c494b20bd487d8bea21b97781d87f2ea6c13a0831987","sha512":"c5894033ca4747e979277f434e6d011bc2321c582437701af4d6889f27f1c9e34e7d3ad59e63e9c41acbee020ff00118f193fefd7affe811e8daaff2defffbe2","ssdeep":"","tlshash":"51210080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1144,"data":"","first_seen":"2024-08-19T14:11:10.416248Z","last_seen":"2026-05-11T12:45:12.766267Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"d1ae69e11abd1ce51ba8b7e5548fa646","sha1":"c0df669637ffa0a2b4a60e5123694ee1d5df2fa9","sha256":"f7b13ef234254f15629cedf981dc2f906820b663bdbfc8f6767699e59cf0618d","sha512":"6ef70cfe6ae56a1d1848c75497c881cb716f69465b63e6cda2cc432146764ae0c6615e417e4fc77c21bf26b38cf045cac235c061cdd11b7514ebeb0385894681","ssdeep":"","tlshash":"052100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1141,"data":"","first_seen":"2024-08-19T14:11:10.415315Z","last_seen":"2026-05-11T12:45:12.761661Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f0bc7a6fe69af21ffaab12dae27d9c3","sha1":"7a6dceb76b98aeb9715bd2b255a375d52b0bc952","sha256":"ce262a196869341e1f2c442b6e18d7e7692d53ec8fb2fc6c287cb1c20261a372","sha512":"51dcabab96a559217ae3c11eda19b543bd969d211f21ed7814274e3c78e9a357e95e8ac3694f815e97d91a3d4402aade0d8a549d9597fc9c420a75c009206644","ssdeep":"192:Zn9wKCCBlN9wKCC1X9wKCCX39wKCC9X9wKCCssxJ9wKCC739wKCCeQD9wKCCTp9h:Znv/7XV3rXrnJ3AQDhpTXhb5VhFRJN","tlshash":"ac32c46cf9932468789334258faf104434e87547cb49d8153eadb8c26f8850da5bbfde","size":11153,"data":"","first_seen":"2024-08-19T14:11:10.4229Z","last_seen":"2026-05-11T12:45:12.762958Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"2fc922c73d2568487d3770ada093e910","sha1":"32f2e030d654c49b82b5c8105b7c116c48e66c3d","sha256":"ef6255a89aefcf1e5a350ab22ba6654574993af4b518674eb3ab9957c4d610ea","sha512":"c99e3e73415d1e6797b122edf274ea61f7a2205d76520357355d1fc6f6b4cad7a53604c69831de24c34cf3c54ea166f6522be6e994ad84c8d0021d337b0a919e","ssdeep":"","tlshash":"92215c45a70b2cd828f3996f1f53c4120c3a24136847ca283f5dd7e09fe9e939469d9d","size":1166,"data":"","first_seen":"2024-08-19T14:11:10.423831Z","last_seen":"2026-05-11T12:45:12.767044Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"7a3783aec522cff19204f62881e43c57","sha1":"cf51e5470a27f0ca072d50a33a7a986887c57b96","sha256":"da688da9cb095c180f35c494b20bd487d8bea21b97781d87f2ea6c13a0831987","sha512":"c5894033ca4747e979277f434e6d011bc2321c582437701af4d6889f27f1c9e34e7d3ad59e63e9c41acbee020ff00118f193fefd7affe811e8daaff2defffbe2","ssdeep":"","tlshash":"51210080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1144,"data":"","first_seen":"2024-08-19T14:11:10.416248Z","last_seen":"2026-05-11T12:45:12.766267Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"ef5f609b8c44a10e1d2d43eb87780e14","sha1":"10d971461158bdf03cc42905b94bbc9e4cc76483","sha256":"6a7a983aa9d59b421dd7b097d25fc42654dbb6c6ec065126def1034e9a7a63e8","sha512":"e03d1619ffbcd27e5915fcaed89cd1d95b423e9b64a39d1469455aaa51c3473b04427f660c62058576504da81ab5160fbaa80b092d0a7b7d10e5bde218ebb2c9","ssdeep":"","tlshash":"89210080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1137,"data":"","first_seen":"2024-08-19T14:11:10.419333Z","last_seen":"2026-05-11T12:45:12.759643Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"e0605f21f4ede3a3d991647d14a75f9b","sha1":"92bb6d1c29d16dff8327032006d09be30c9f7eb5","sha256":"3bc789d012c824f951ebec8bdc5c9e158810b511782e13f24c7c5d28e652abc9","sha512":"cdbbcf5516e1a9b727d7253f8ab9e850b2204b6920792035cf561a006e4a11e2a66e0f0200b4611adaff93df35760ea7f8830fdd87995a08cc26aa6cd668b841","ssdeep":"","tlshash":"be2100c0c0003c00c0c3003c0cf00000f0300000c030c0000c0cc0cc00ccc33c000c0c","size":1157,"data":"","first_seen":"2024-08-19T14:11:10.425378Z","last_seen":"2026-05-11T12:45:12.762323Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"fbbb012e519b910a02da83ac6d3112da","sha1":"a03af70ac8200203516bb605834e1e3a1a061948","sha256":"b3f004b5887b020f0abc7d1046d655e1b275a9eb354f05212175561521105a47","sha512":"5c76b4a0f8abfa543ae0c28835d8685715b0899a787e39f251d28a06484c9f51a0de7dc1fc258b4891080768550ee830e5b0594bbac8a8e61594d117ce751b80","ssdeep":"","tlshash":"6cf0c96e0a1ed7ff70a80235532aa2ef70cd4baa90076807fe87021716ac118bc01ea1","size":527,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-06-04T15:30:27.669974Z","times_seen":6997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-06-08T02:41:33.032658Z","times_seen":13819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"85ffacf23e26c18898c10a6b489e739c","sha1":"26d5a83db6ca0158c087dff626f846d87e5e53cd","sha256":"c15e140d25c09bcc7190b9c1ebf065bc3e8d946bd01f22c66129daa5e9e14996","sha512":"e1df005a5775e60a0c3a85007c1c79dae671d6625c8a783c57bce44ea97a0a2fdfed5524f8537358884dffa6431f47eaf8996b49bfd3c2741592f576df6480cc","ssdeep":"","tlshash":"982100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1139,"data":"","first_seen":"2024-08-19T14:11:10.414388Z","last_seen":"2026-05-11T12:45:12.758619Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"85ffacf23e26c18898c10a6b489e739c","sha1":"26d5a83db6ca0158c087dff626f846d87e5e53cd","sha256":"c15e140d25c09bcc7190b9c1ebf065bc3e8d946bd01f22c66129daa5e9e14996","sha512":"e1df005a5775e60a0c3a85007c1c79dae671d6625c8a783c57bce44ea97a0a2fdfed5524f8537358884dffa6431f47eaf8996b49bfd3c2741592f576df6480cc","ssdeep":"","tlshash":"982100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1139,"data":"","first_seen":"2024-08-19T14:11:10.414388Z","last_seen":"2026-05-11T12:45:12.758619Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Public/Home/static/js/layer/layer.js","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-06-05T10:31:55.295092Z","times_seen":13773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"d1ae69e11abd1ce51ba8b7e5548fa646","sha1":"c0df669637ffa0a2b4a60e5123694ee1d5df2fa9","sha256":"f7b13ef234254f15629cedf981dc2f906820b663bdbfc8f6767699e59cf0618d","sha512":"6ef70cfe6ae56a1d1848c75497c881cb716f69465b63e6cda2cc432146764ae0c6615e417e4fc77c21bf26b38cf045cac235c061cdd11b7514ebeb0385894681","ssdeep":"","tlshash":"052100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1141,"data":"","first_seen":"2024-08-19T14:11:10.415315Z","last_seen":"2026-05-11T12:45:12.761661Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"ef5f609b8c44a10e1d2d43eb87780e14","sha1":"10d971461158bdf03cc42905b94bbc9e4cc76483","sha256":"6a7a983aa9d59b421dd7b097d25fc42654dbb6c6ec065126def1034e9a7a63e8","sha512":"e03d1619ffbcd27e5915fcaed89cd1d95b423e9b64a39d1469455aaa51c3473b04427f660c62058576504da81ab5160fbaa80b092d0a7b7d10e5bde218ebb2c9","ssdeep":"","tlshash":"89210080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1137,"data":"","first_seen":"2024-08-19T14:11:10.419333Z","last_seen":"2026-05-11T12:45:12.759643Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"e5434d3dbe59898064069ab07619ec69","sha1":"6cb023a5125211c98c395d1b292288c8fdf647b1","sha256":"3658d47226d27d5d669afd74f038987918d415f8618a1267fed9c4d31bb3a298","sha512":"97a2281898d6edaa7ac2ede5e50a2867deeb920bf803098e34a04ed3cdc08bc922bfa9e9387d8120331a69f24109203af2c5f4043e802578fdb29dc8bf9b1b67","ssdeep":"","tlshash":"2a2100e0c08e0c22808080380cb0000220208000c8c08000080080800008002800080c","size":1153,"data":"","first_seen":"2024-08-19T14:11:10.420152Z","last_seen":"2026-05-11T12:45:12.764443Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"ef5f609b8c44a10e1d2d43eb87780e14","sha1":"10d971461158bdf03cc42905b94bbc9e4cc76483","sha256":"6a7a983aa9d59b421dd7b097d25fc42654dbb6c6ec065126def1034e9a7a63e8","sha512":"e03d1619ffbcd27e5915fcaed89cd1d95b423e9b64a39d1469455aaa51c3473b04427f660c62058576504da81ab5160fbaa80b092d0a7b7d10e5bde218ebb2c9","ssdeep":"","tlshash":"89210080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1137,"data":"","first_seen":"2024-08-19T14:11:10.419333Z","last_seen":"2026-05-11T12:45:12.759643Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"ef5f609b8c44a10e1d2d43eb87780e14","sha1":"10d971461158bdf03cc42905b94bbc9e4cc76483","sha256":"6a7a983aa9d59b421dd7b097d25fc42654dbb6c6ec065126def1034e9a7a63e8","sha512":"e03d1619ffbcd27e5915fcaed89cd1d95b423e9b64a39d1469455aaa51c3473b04427f660c62058576504da81ab5160fbaa80b092d0a7b7d10e5bde218ebb2c9","ssdeep":"","tlshash":"89210080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1137,"data":"","first_seen":"2024-08-19T14:11:10.419333Z","last_seen":"2026-05-11T12:45:12.759643Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"ef5f609b8c44a10e1d2d43eb87780e14","sha1":"10d971461158bdf03cc42905b94bbc9e4cc76483","sha256":"6a7a983aa9d59b421dd7b097d25fc42654dbb6c6ec065126def1034e9a7a63e8","sha512":"e03d1619ffbcd27e5915fcaed89cd1d95b423e9b64a39d1469455aaa51c3473b04427f660c62058576504da81ab5160fbaa80b092d0a7b7d10e5bde218ebb2c9","ssdeep":"","tlshash":"89210080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1137,"data":"","first_seen":"2024-08-19T14:11:10.419333Z","last_seen":"2026-05-11T12:45:12.759643Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Public/Static/Icoinfont/iconfont.js","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bd113cc499a1219bf9ea37f3631648c","sha1":"d67cc3b70f089242f413077f0ebf6d432d4e1c22","sha256":"01fa3e4b23815f980f0aad07962b7d396f56581d59a2354a3cb8bdf8c1333a72","sha512":"a3ef4703696c62c80cdcea550b0f0cc0f6bacbc5f278420c75de71ff017d5eb2d92bf34e84d70d911f2b937d82e5eaee941cc12e86cb4a5303bb799c67a53c91","ssdeep":"1536:aAYIIXla1ajFDIiF7ma19kwCZZkNZuxhQ7mk:XK+k4iqk","tlshash":"a533b9f8976855fc9c0ec3ed9626a568230f9cfe79624928895e8f5097037dccb0788d","size":53379,"data":"","first_seen":"2024-05-09T07:39:47Z","last_seen":"2026-05-11T12:45:12.71914Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/2.1.1/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.20","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-06-08T02:28:42.746397Z","times_seen":10048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_btc.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:12.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2e4d3168e1e374274cc6180cf372908d","sha1":"e15136840fe8d40efd056febedd57d5394391802","sha256":"2119057f12035d9e8e356b3c22673ef5a8f5b7c8b2f534b29e06fb5c53c0cf83","sha512":"a5fe3b04e5c0bc82d2b93e8372367bf766e66dd9fc2c3f0bbff10cf3d225e8b6870fd4ab7693ca8010e2b9f3f69b4033b653237cd8e307950b6234d35c6fe3a9","ssdeep":"","tlshash":"aec012e07b7565664c32d7d5d4f5079f544d0493c0848249aefd8af9a56c1183623d15","first_seen":"2026-04-22T18:27:35.431905Z","last_seen":"2026-04-22T18:27:35.431905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_eth.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:14.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"809e798079a2cea2366c2daba70b82d0","sha1":"82f05b8294797f0f95fdf70f66767d2e0e06e2c5","sha256":"736e67474e19373f390d00429082c23cee3d0621837d468cb054c31e7a07b1c0","sha512":"1c7d1e335f5e7c8cd3e7c66b7a0e1250b5797bcc3dc45a51e30a0a693eb5cecd27c6ed67963962ef0419546624e615a303a14238920e03a28b7fb5b4c701e9d5","ssdeep":"","tlshash":"f5c022d4bb3504020c20e3e096c80b2e640c00c7c0c0830e6efd8be90a2c20c3206c14","first_seen":"2026-04-22T18:27:35.432816Z","last_seen":"2026-04-22T18:27:35.432816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_ltc.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:19.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ltc.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=ltc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ded010682a0fec464d7d01be53e75666","sha1":"0fdc7f13d82445a8e6096fc04a76997a8718adb1","sha256":"8582e0952e841272cd9c6defdfc6ada3f00d5ef9142f75daa65ffc4c41d68eb1","sha512":"8e098db5c576edb98ce69ad936a2c9f3784f4192e9f5267fcd4a9cf5d1d15130989be59d47635a72bc34f31c058d80a5fe3110358e88cf658705bb6fb109627d","ssdeep":"","tlshash":"adc012d0773404250d7197d198d5070e585c4986e49446495bfec7f8256c81d3712c54","first_seen":"2026-04-22T18:27:35.433734Z","last_seen":"2026-04-22T18:28:09.604337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_iota.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:21.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_iota.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=iota"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":185,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"627a9dae201460f94cf48e92f7b24792","sha1":"4d49531e346ee730b50b6331df9510c852245b65","sha256":"d0b751372a10bcf46c52faf6517b6a319e1ab43f40016ecd1cdd35163d8d4767","sha512":"de2a3b3a891c3ff39c188ae297cf2f107c86ce0e42b063d9832efe6b41866b4a618cdbd385065a8bb14e844f3eb5837e8883b5002f1cb21582454acaecc764be","ssdeep":"","tlshash":"c0c012d03b74145a087197e294d517eeb44d84da80805b0a5bfddab868985183236954","first_seen":"2026-04-22T18:27:35.434493Z","last_seen":"2026-04-22T18:27:35.434493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_fil.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:23.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_fil.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=fil"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":187,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2833933de3a1bb55127641dba5124689","sha1":"7d7172d77cf5056b0450aba5b35f9c8825535649","sha256":"54fb7807328423a190f7da305caf09c741cfd73bf5d807a1ed6e3002e864946a","sha512":"abc7867587a340495705cba8e33834d4ddf82d3215e32cbeb0706c9fe3bf14caca9dd18cb79b8ab881ec3a2bc48e5f7e8071fb858aae7cdbd060a4db3fecabd3","ssdeep":"","tlshash":"d1c012d03bb445210da297e154d6571e69de058ad8809609dafd86b814a982c7216d50","first_seen":"2026-04-22T18:27:35.43538Z","last_seen":"2026-04-22T18:28:09.631748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Public/Static/Icoinfont/iconfont.js","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET /Public/Static/Icoinfont/iconfont.js HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Sep 2022 02:43:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"631aa83e-d083\"\r\nexpires: Thu, 23 Apr 2026 06:27:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53379,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (53379), with no line terminators","md5":"5bd113cc499a1219bf9ea37f3631648c","sha1":"d67cc3b70f089242f413077f0ebf6d432d4e1c22","sha256":"01fa3e4b23815f980f0aad07962b7d396f56581d59a2354a3cb8bdf8c1333a72","sha512":"a3ef4703696c62c80cdcea550b0f0cc0f6bacbc5f278420c75de71ff017d5eb2d92bf34e84d70d911f2b937d82e5eaee941cc12e86cb4a5303bb799c67a53c91","ssdeep":"1536:aAYIIXla1ajFDIiF7ma19kwCZZkNZuxhQ7mk:XK+k4iqk","tlshash":"a533b9f8976855fc9c0ec3ed9626a568230f9cfe79624928895e8f5097037dccb0788d","first_seen":"2024-05-09T07:39:47Z","last_seen":"2026-05-11T12:45:12.71914Z","times_seen":18,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Upload/public/642fffc7dabaf.jpg","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET /Upload/public/642fffc7dabaf.jpg HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 07 Apr 2023 11:34:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"642fffc7-2fa199\"\r\nexpires: Fri, 22 May 2026 18:27:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3121561,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2000, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=4000], progressive, precision 8, 4000x2000, components 3","md5":"4538b2e3bb5626d70b678c0bf79baa8c","sha1":"b22cec78092dd62794cb5de2b6ccf985771baa1a","sha256":"ddecfb74cbeb790bc438db42aaf9f3e1a202ff0453b24da82d0bc6af46a9c1a7","sha512":"9ae2469833229ef9b9682fb9390551e5cfdc33cef408b0474297209dbed18a05e27a78c10694f7bb41182cef60777f59c4001c7c9a03297dff034aeb28b68ff3","ssdeep":"24576:xNvWaqcweNY3WYGTrnr5nDWU7TdOQ7CIwERG37waz3VRNdxCk:nvW5ca3WYGtDWqTdOIByvLVRNdxCk","tlshash":"072533579b092813c7b49931808b73ed3b16d9ec9fc37253738e41a42fa5979b52c983","first_seen":"2026-04-22T18:26:20.144236Z","last_seen":"2026-05-11T12:45:12.712342Z","times_seen":5,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":855,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_usdz.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_usdz.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=usdz"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8ad1213779ecd074f889bc6faba3088d","sha1":"0f1870226fe24e6c785853c55733aa01e4f4befa","sha256":"d8bc63300ec5516e762df5a3a6e8105894f9808e1401918b8182c93b9d40176b","sha512":"9d411ad53bb7eef6b9f46f4279381dbdd694e3f653979df1dc5c6899f4371a10926a22a41e5739f4c6c324a1b26a186d47e1e55d680c43d083141ebc9136bba6","ssdeep":"","tlshash":"60d0a9d02e34582190f2abc134f923abe44cb886c0c0820a5bfec7a0292c014b229c10","first_seen":"2025-12-23T02:13:20.561608Z","last_seen":"2026-05-11T12:45:12.756576Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_eth.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:11.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c01ac67ffae3a637d8da1cf2ab80b0b","sha1":"31ea7f1ef2e7a52b371fca7d6364c81a7c95a702","sha256":"9ea6a99c8c69a6595950e7c7a75d72d431dc9a8d2ecd58a2a9075f1c7ea7d1b6","sha512":"f3d5d3bc3489da5da8eacb0a93eed896d95fddf1c1706b5df81851f8595e0ad9e6402d30eb86d4eb6efa0c9b67a273d04635fd9645306f933e84a9d7decfd47f","ssdeep":"","tlshash":"12c022e4bb7a04550c21e3e099c90b1e610c00c7c0c1430e5efc8bea052820c3303c68","first_seen":"2026-04-22T18:27:35.438157Z","last_seen":"2026-04-22T18:27:35.438157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_btc.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:24.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5d5d5f19843e479909d7cab87f5b0b55","sha1":"6e6a9ee0293e634086f1f0e80a8b6fc75ef270c7","sha256":"e298eeeddf96561d9c75f6686cce4312e270ebdc7aded019be2a1c5571b6cc0b","sha512":"fdfce2494a73d6c7eaa2b4c8280b498d22c968961a5997051b9a6a8c540e425d853f57ac88051732458af5f694b4f70232cde345f4835287bbd29a9da47829e3","ssdeep":"","tlshash":"ecc012e06b7925220c72c7d1d4e91b9f548d00d390c9825e5efe8ae8aa6c8183517c64","first_seen":"2026-04-22T18:27:35.438934Z","last_seen":"2026-04-22T18:27:35.438934Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T18:27:06.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:2.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":56872,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"5a345b481e69c62ea79663d91469e90e","sha1":"b70213e3a8af3b58beece98e5314cc8509da4f15","sha256":"ebff8150c19938a1c11c424b737152a49f9e2270e2ce325a86c74ee0891e8b9e","sha512":"d8ee9af0b7616b637d8f4f41d16c98c1c3cbb1f51c8d8fdc75795afa1299bf17b277e4c7baad90014859367b3a2d7aabc797eea41139625a4934a7129f06f7dd","ssdeep":"768:Nz1ySltZhWIYUeY7eYX7LYxdYYyrEY4JAHIVSKIVIqApEuETpHTHA7p0AbtL7vha:CSN6O9wozM9xbHrrNJeYGh","tlshash":"80431160a3e64479b057a0429b649e4a3df1b113eb47c9007bfc2ae1bf97d48e8635dc","first_seen":"2026-04-22T18:26:20.156552Z","last_seen":"2026-05-11T12:45:12.740748Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2175,"timings":{"blocked":926,"dns":351,"connect":284,"send":0,"wait":323,"receive":0,"ssl":289},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 24869\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220176-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 5941841\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8gCBKBAJ6oCe4VV1oin7Mzdz5KFJbVZWAZghFo%2FueevA4c8C%2B3YTF55P0%2BcYNhzg%2BEeeBflAy6n1bQCVx%2ByQNee6ML8HYwdrEwRAa0D0Hiassppr640MtiE5h3lbBvcpRfo%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f06ae458ddf56b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-06-08T05:40:44.029665Z","times_seen":24655,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":5,"receive":4,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Upload/public/64300004d5b61.jpg","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET /Upload/public/64300004d5b61.jpg HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 07 Apr 2023 11:35:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64300004-6510b\"\r\nexpires: Fri, 22 May 2026 18:27:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":413963,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x1350, components 3","md5":"094926bea9b325d5ba89815885924a83","sha1":"f852282f61a035726740d4c9d60b07f7fbb44e62","sha256":"8c27964f36ed0d3226ce02c1555689c35ea9de97650d6a507effa126e100271d","sha512":"bf92560652d2bb68ffb9ceee9b0963aef88ed68aeb82fa0e33a94350e1ae0732e488303b672efa0b5e361546bfe1df705c0eccab198dd0ed9cdfde05122786f5","ssdeep":"6144:F8eDPVlMozF8vveF/Krohv8DqceHMkpETBUk8QamyoNFytmCLu9NGOoVseIC//lX:O49EnYSoh0OcwpEWNQawCmIuahsZINwm","tlshash":"f79401c0ed1418944ebe1ef119828017d501a269ffbbf83dac0b6ea1f5a4f9ec726754","first_seen":"2024-08-19T14:11:10.393288Z","last_seen":"2026-05-11T12:45:12.752884Z","times_seen":6,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Public/Home/static/js/layer/skin/layer.css","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Sep 2022 02:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"631aa8d4-36e0\"\r\nexpires: Thu, 23 Apr 2026 06:27:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14048,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-06-04T15:30:27.63912Z","times_seen":3225,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_fil.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_fil.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=fil"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":187,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2833933de3a1bb55127641dba5124689","sha1":"7d7172d77cf5056b0450aba5b35f9c8825535649","sha256":"54fb7807328423a190f7da305caf09c741cfd73bf5d807a1ed6e3002e864946a","sha512":"abc7867587a340495705cba8e33834d4ddf82d3215e32cbeb0706c9fe3bf14caca9dd18cb79b8ab881ec3a2bc48e5f7e8071fb858aae7cdbd060a4db3fecabd3","ssdeep":"","tlshash":"d1c012d03bb445210da297e154d6571e69de058ad8809609dafd86b814a982c7216d50","first_seen":"2026-04-22T18:27:35.43538Z","last_seen":"2026-04-22T18:28:09.631748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_ht.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ht.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 7\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7,"data":"coin=ht"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-01T14:39:11.901324Z","times_seen":318,"resource_available":false,"data":null}},"time_used":1534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_doge.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:15.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eeb914571a3db6d149ccb4c45378fe64","sha1":"832199d59beeb6262c3b0b65310849c5348ba395","sha256":"1170a69a2844b1cbce01ce0e164403809ce0fc2cfe324ef9cd00f0d4ad4ee420","sha512":"267f6dfa5b7891d7f28b3f292128c1e20c7631f57fc25a08ce8168f7fd7f1ea3d7d3ff9e84a487448e481b885b637c1566310f7a2842c90fd5210b50bbb4c44c","ssdeep":"","tlshash":"aed022d07bb408570ca0e3e2a0a9271f608e048280c09f090afdcbf8246c21c3107914","first_seen":"2026-04-22T18:27:35.442313Z","last_seen":"2026-04-22T18:28:09.608764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_bch.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:17.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_bch.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=bch"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"81402c89bf10508917a1ebd1a98caee0","sha1":"9c77bed104993132bab2ce2c0f67facb9c9ddb70","sha256":"3ab1790ff593fdd170353f51b539eb7e91761d9de48783fc5246a02e80221ef3","sha512":"54a210737ad6f8fb0e98fb9f6f8afe56829ff45e584c53abd89b78d404029b7c4a6f6607bbd7fbfab97614154e6b3fc16802166f62713c4e7c106c025b6d87eb","ssdeep":"","tlshash":"edc012c0777d44210c61d7d1b4991b1ea84e1086c1d1820a6afdc7a8156c5183713c60","first_seen":"2026-04-22T18:27:35.443119Z","last_seen":"2026-04-22T18:27:35.443119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Public/Home/static/js/layer/layer.js","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Sep 2022 02:45:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"631aa8d3-4d83\"\r\nexpires: Thu, 23 Apr 2026 06:27:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-06-05T10:31:55.295092Z","times_seen":13773,"resource_available":true,"data":null}},"time_used":853,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":853,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:27:08 GMT\r\ncontent-type: font/woff\r\ncontent-length: 106812\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"1a13c-GxDOCA4lYqi36DlQRNPKg9wRKZk\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230120-FRA, cache-bma-essb1270030-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2988337\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFYdD7ASWhqm%2BVXJy72QJHTROx9VSTIJmxeXyqYgOsx1lEjoUhQls%2BagtqANUv974WgXhRhrVoipbq%2BoStEGOiM%2B0IyCPBj%2BsfDwKPu8S9BjKOAjajDeFgxX5qffrcStRZ0%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f06ae47885756b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106812,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-06T14:42:22.497672Z","times_seen":10412,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_iota.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_iota.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=iota"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":185,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"14ebcdd6db4773820d64ee91bdfc663e","sha1":"3f51479b5dc364cd899e2ccb08c240d34b1d9e65","sha256":"62a4f5089a547f4e8c968d5eb02be20477519c8f83d4a196315d01c29dea9678","sha512":"14fdfdac71958cd5a96b59fe78b091d61a974d97dc547fe093a1ed50edeb6065fd4ef7885f5cac878291f31b7031a642420637f5c12e6e587072a39cfa250ced","ssdeep":"","tlshash":"d4c022c03738000a086193e290c813ee684d888680c2960a1bfddbb8645800c3223e00","first_seen":"2026-04-22T18:27:35.44483Z","last_seen":"2026-04-22T18:27:35.44483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_itc.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_itc.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=itc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-01T14:39:11.901324Z","times_seen":318,"resource_available":false,"data":null}},"time_used":1190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_eos.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:13.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-01T14:39:11.901324Z","times_seen":318,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_btc.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:14.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86292f552dc36f34f71346f293994be9","sha1":"122541b667cd7650166646d96b2fddf0acc0f3f9","sha256":"34f2167873019ddb575e2ac3a5d33714664a1aff81a8eb52dbf3d72ea8304851","sha512":"d16e5630b53c179855892ca0b60ee40a85fbfc5c6c2a9c48f829a997ab771f5b69287e8666b8d75feac2b02b9b1bd2c43a2f733f61e24d2b5e7beed4bd239337","ssdeep":"","tlshash":"4ac012e02b3555210c72e7d595e5079f549d4097c0c4424d5afd8ab9657c01c3523e54","first_seen":"2026-04-22T18:27:35.445612Z","last_seen":"2026-04-22T18:27:35.445612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_btc.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:18.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"820b23cf05c474dc2e3c3ac4443c10b4","sha1":"fd8056af28979b13a3988070e3ad64a53ad1e0ea","sha256":"1b8fa6c2e92a3efce142607b8966db333dd3de55213ec9d91685699443866df0","sha512":"3862068378e00a6679c392dfc22dd505c8c0a09d0f3d048bf86ced1f049a67efa025f5bb54cce0eafeed571312b284e50a8c2f4cdb62c40c2aa11de8cf72f716","ssdeep":"","tlshash":"03c022e02b3054310c72dbc085e4078fa44e00838080420d5afc8ab8622d11c3123d10","first_seen":"2026-04-22T18:27:35.446409Z","last_seen":"2026-04-22T18:27:35.446409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_doge.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:22.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eeb914571a3db6d149ccb4c45378fe64","sha1":"832199d59beeb6262c3b0b65310849c5348ba395","sha256":"1170a69a2844b1cbce01ce0e164403809ce0fc2cfe324ef9cd00f0d4ad4ee420","sha512":"267f6dfa5b7891d7f28b3f292128c1e20c7631f57fc25a08ce8168f7fd7f1ea3d7d3ff9e84a487448e481b885b637c1566310f7a2842c90fd5210b50bbb4c44c","ssdeep":"","tlshash":"aed022d07bb408570ca0e3e2a0a9271f608e048280c09f090afdcbf8246c21c3107914","first_seen":"2026-04-22T18:27:35.442313Z","last_seen":"2026-04-22T18:28:09.608764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 8018\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220103-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3081137\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9M8JB4zX44MZ9SyS04BlxX3wjvlE7himK2Xooppq9AU5JhhbCMysCUdmc0nIi%2FLrhSe4pwrw%2FoHZ0ZhNa%2Bgwi70%2BstoiCHP06OYxwq3EYTFt41lLwwjY81bV5qwdSmOJL0k%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f06ae459ca98be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-06-07T14:20:27.280475Z","times_seen":15008,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":9,"dns":0,"connect":1,"send":0,"wait":8,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_doge.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eeb914571a3db6d149ccb4c45378fe64","sha1":"832199d59beeb6262c3b0b65310849c5348ba395","sha256":"1170a69a2844b1cbce01ce0e164403809ce0fc2cfe324ef9cd00f0d4ad4ee420","sha512":"267f6dfa5b7891d7f28b3f292128c1e20c7631f57fc25a08ce8168f7fd7f1ea3d7d3ff9e84a487448e481b885b637c1566310f7a2842c90fd5210b50bbb4c44c","ssdeep":"","tlshash":"aed022d07bb408570ca0e3e2a0a9271f608e048280c09f090afdcbf8246c21c3107914","first_seen":"2026-04-22T18:27:35.442313Z","last_seen":"2026-04-22T18:28:09.608764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":949,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_flow.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_flow.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=flow"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8b4888e7a2837a11c39632271a896bb6","sha1":"44c35083cb5e974bfb5ef2e921b1228e7d34b542","sha256":"48251a3e16709e9f85515d759cbafd6cf234c55b87ae1c602c8871ef688a8c21","sha512":"508c2618f5fb82526489e7d11a6101c094ce3e666131c24b9f2b98de556911a35c388e707540ee1e71705183d25b40f1938e39d52f4386b01d6e68da2e4411db","ssdeep":"","tlshash":"d2c012e03e79141205e5ebd324b9076e68eac843c48556459bedc6306b2cb14750ad10","first_seen":"2026-04-22T18:27:35.447739Z","last_seen":"2026-04-22T18:28:09.629618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_eth.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:17.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"809e798079a2cea2366c2daba70b82d0","sha1":"82f05b8294797f0f95fdf70f66767d2e0e06e2c5","sha256":"736e67474e19373f390d00429082c23cee3d0621837d468cb054c31e7a07b1c0","sha512":"1c7d1e335f5e7c8cd3e7c66b7a0e1250b5797bcc3dc45a51e30a0a693eb5cecd27c6ed67963962ef0419546624e615a303a14238920e03a28b7fb5b4c701e9d5","ssdeep":"","tlshash":"f5c022d4bb3504020c20e3e096c80b2e640c00c7c0c0830e6efd8be90a2c20c3206c14","first_seen":"2026-04-22T18:27:35.432816Z","last_seen":"2026-04-22T18:27:35.432816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_eth.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:23.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f1e7297d5cc202247966bef8b3ada8ff","sha1":"564725f479a6bc85aad28c334ec87a001efa39e6","sha256":"8b63fe4348aa015c467d2b9ec6d5ffdd3af0263bc03e648de3ce231c424a5ca7","sha512":"e6d76b3840e9b9ffb673e0ed8124bd3b70a160836d36648581934e9ee1191b3a918d0f612b88420926df924247f9c25cd5255f7b8092a11a9afb0021fcd08568","ssdeep":"","tlshash":"aac022a4bb3108510c20e3e0d4c40b1e700c0086c0c1834ebafd8bba0a2820c3303c24","first_seen":"2026-04-22T18:27:35.448573Z","last_seen":"2026-04-22T18:27:35.448573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Public/Home/static/css/base.css","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET /Public/Home/static/css/base.css HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Sep 2022 02:45:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"631aa8d6-259c\"\r\nexpires: Thu, 23 Apr 2026 06:27:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9628,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e51fa493a52ce0366561e33df5d6ae36","sha1":"e6e8cf8b75d98304b0974dff670275820565bc06","sha256":"f13c4dde543b28bba03780eb76396444a21bb0a3fa68ea42af35e9620fa5d8db","sha512":"5cd14a4caf081db56db15e7268d993f8e06df53d79e55f97dd22f2db9584108d0bdd0251ab59dece26f9b63ce18dd90465fe3e033b299caa337885fec727dba7","ssdeep":"192:BlXHyNlXHyomlXHyG6lXHyeTV1Q7lXHyslXHyGlXHyp9V1QXOHS9V1QFn0iAI4H9:yKFiOz","tlshash":"7012efab87531205e8078d640fe45b2613698427c64bfafd7ec21a44cf8b6cdd9e23d6","first_seen":"2025-12-23T02:13:20.578444Z","last_seen":"2026-05-11T12:45:12.742354Z","times_seen":7,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Public/Home/static/imgs/alogo.png","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET /Public/Home/static/imgs/alogo.png HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Mar 2023 07:24:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64229626-140c\"\r\nexpires: Fri, 22 May 2026 18:27:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5132,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Generated by Snipaste\", baseline, precision 8, 200x200, components 3","md5":"98af3de6d565348073c9c05be5bc9757","sha1":"5fd6d47d2eae18eabbaa2a520db0695772c6fd3a","sha256":"c5c904b50ae067254bf7b6f18cac75524d192b91d87efb5603da0aa2a68eec99","sha512":"11ab3460b6acae19d9cd2083737ff545372fafad222a6d0ca32b18b0c2229574cdb526529a9355a863512724b2e38c0da437554551b95d453d202833c29febb6","ssdeep":"96:fWAEGGAjwEqnImaMpnUr+YklqtgcAG1VPuH+FECO2/XQK:xvjmaoakqBZuH+2pzK","tlshash":"f2b11770f793c3429f57a45e083c3f7bfb5002d2aac4024318235d29a2a0f758743aae","first_seen":"2024-08-19T14:11:10.396869Z","last_seen":"2026-05-11T12:45:12.735124Z","times_seen":12,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Upload/public/642fff8f6fd93.jpg","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET /Upload/public/642fff8f6fd93.jpg HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 07 Apr 2023 11:33:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"642fff8f-12c80\"\r\nexpires: Fri, 22 May 2026 18:27:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76928,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1568x681, components 3","md5":"0f2b4a9b9106c68e88b10fa1d53c43e3","sha1":"ec76cd6d6ab8e1f1571257d825e7e0ce2ba2109a","sha256":"8eaa69504a36c94b99db5064350c3a3bbe0cbde41f4379e82e7c17449e4d5d6e","sha512":"d5a418d7688120b22b2aa5c2307f600154980050df19e087ebec89906ec797ecc35a4849c7f4a293b2b92c9a5581cd8747e6e60f4f6bddb820e075dc8cf60d30","ssdeep":"1536:qo8ynnyQALzjvMw2moJQ7pcnt5yvhG4mZ6jpCxoLq0Nd8pRM+xI:l99gXvZp55TBjYxoTNd8bM+O","tlshash":"e073b013cc994797a13847bdbc070ebd6f1d6a0de8922bff44324eda79242621d5f12a","first_seen":"2024-08-19T14:11:10.402077Z","last_seen":"2026-05-11T12:45:12.72711Z","times_seen":8,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":855,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_bch.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_bch.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=bch"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6b7b8e545a47887d42aa4714b8f3a080","sha1":"e48e849b484453c6cf8c887a2f938b58d424750a","sha256":"4f0e558966c5c1254077d4e539e190fc5246fdec27a0246a124c5765bc7cafe7","sha512":"7e0c11cfcdc30356274c1685e03f224f223f20a734b6136f99ac1d709bb8b7c749a89b4cab1b09c197ae168c365b9682886a2dc33f8df70dad7e7935031da418","ssdeep":"","tlshash":"7ac012c0777d48110d31d7d1b4a9171e744e04d685c146096afdc7a8155c21c3613c54","first_seen":"2026-04-22T18:27:35.451022Z","last_seen":"2026-04-22T18:27:35.451022Z","times_seen":1,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_eos.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:18.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-01T14:39:11.901324Z","times_seen":318,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_btc.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:22.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"695159423290bd980e20b42dcab2a44f","sha1":"a4b9af5cd1d61ea60b28f2b20037bc1405c09a71","sha256":"8f2967ed1269055d9e4dfff6dae515d3532f61fb0bf03c8e303b084cedb5b972","sha512":"5e9005c222449941f8b5faf8d9b2ee9e8d108899b59468f54302e909a047b01663a1dc1d98509ae2eef9ce1723a964cf6228cee88b03475b388ae1d87a33fb4e","ssdeep":"","tlshash":"d9c012a06b7926260c32c7d194e5175f548e009380c8425e6efdcba9b5ac4083613c55","first_seen":"2026-04-22T18:27:35.451825Z","last_seen":"2026-04-22T18:27:35.451825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/favicon.ico","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:10.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:10 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5132\r\nlast-modified: Tue, 28 Mar 2023 07:29:13 GMT\r\netag: \"64229749-140c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5132,"size_decoded":0,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Generated by Snipaste\", baseline, precision 8, 200x200, components 3","md5":"98af3de6d565348073c9c05be5bc9757","sha1":"5fd6d47d2eae18eabbaa2a520db0695772c6fd3a","sha256":"c5c904b50ae067254bf7b6f18cac75524d192b91d87efb5603da0aa2a68eec99","sha512":"11ab3460b6acae19d9cd2083737ff545372fafad222a6d0ca32b18b0c2229574cdb526529a9355a863512724b2e38c0da437554551b95d453d202833c29febb6","ssdeep":"96:fWAEGGAjwEqnImaMpnUr+YklqtgcAG1VPuH+FECO2/XQK:xvjmaoakqBZuH+2pzK","tlshash":"f2b11770f793c3429f57a45e083c3f7bfb5002d2aac4024318235d29a2a0f758743aae","first_seen":"2024-08-19T14:11:10.396869Z","last_seen":"2026-05-11T12:45:12.735124Z","times_seen":12,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Sep 2022 02:45:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"631aa8d2-2c9e\"\r\nexpires: Thu, 23 Apr 2026 06:27:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-06-08T02:41:33.032658Z","times_seen":13819,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_jst.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_jst.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=jst"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b791b6a71e62c81fe7314ae5e55e2450","sha1":"c2404b58701e3e708be625e0d1f0f7ba811bb2a8","sha256":"d5e4bfa081f878a3ae7bc4809435cd5a935296db1d2d5d8de09c58b256085a1f","sha512":"c0dc4f6d1a22b07f9f6c2c472302a14bb2fd72133cd9c32e9408723463e1a96e7bcb3a135e8242692af8b8efb03662e2eaa3cc52638fab171e54cf7f765a6990","ssdeep":"","tlshash":"23c012a07b7d04170963a7d154ea176f648dc386c4c1d2495bfdcbb865295197923c14","first_seen":"2026-04-22T18:27:35.45315Z","last_seen":"2026-04-22T18:27:35.45315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_btc.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:10.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2e4d3168e1e374274cc6180cf372908d","sha1":"e15136840fe8d40efd056febedd57d5394391802","sha256":"2119057f12035d9e8e356b3c22673ef5a8f5b7c8b2f534b29e06fb5c53c0cf83","sha512":"a5fe3b04e5c0bc82d2b93e8372367bf766e66dd9fc2c3f0bbff10cf3d225e8b6870fd4ab7693ca8010e2b9f3f69b4033b653237cd8e307950b6234d35c6fe3a9","ssdeep":"","tlshash":"aec012e07b7565664c32d7d5d4f5079f544d0493c0848249aefd8af9a56c1183623d15","first_seen":"2026-04-22T18:27:35.431905Z","last_seen":"2026-04-22T18:27:35.431905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_btc.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:20.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"820b23cf05c474dc2e3c3ac4443c10b4","sha1":"fd8056af28979b13a3988070e3ad64a53ad1e0ea","sha256":"1b8fa6c2e92a3efce142607b8966db333dd3de55213ec9d91685699443866df0","sha512":"3862068378e00a6679c392dfc22dd505c8c0a09d0f3d048bf86ced1f049a67efa025f5bb54cce0eafeed571312b284e50a8c2f4cdb62c40c2aa11de8cf72f716","ssdeep":"","tlshash":"03c022e02b3054310c72dbc085e4078fa44e00838080420d5afc8ab8622d11c3123d10","first_seen":"2026-04-22T18:27:35.446409Z","last_seen":"2026-04-22T18:27:35.446409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Public/Static/qrcode/FanamLa.png","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"GET /Public/Static/qrcode/FanamLa.png HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Apr 2023 09:44:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6427fd13-140c\"\r\nexpires: Fri, 22 May 2026 18:27:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5132,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Generated by Snipaste\", baseline, precision 8, 200x200, components 3","md5":"98af3de6d565348073c9c05be5bc9757","sha1":"5fd6d47d2eae18eabbaa2a520db0695772c6fd3a","sha256":"c5c904b50ae067254bf7b6f18cac75524d192b91d87efb5603da0aa2a68eec99","sha512":"11ab3460b6acae19d9cd2083737ff545372fafad222a6d0ca32b18b0c2229574cdb526529a9355a863512724b2e38c0da437554551b95d453d202833c29febb6","ssdeep":"96:fWAEGGAjwEqnImaMpnUr+YklqtgcAG1VPuH+FECO2/XQK:xvjmaoakqBZuH+2pzK","tlshash":"f2b11770f793c3429f57a45e083c3f7bfb5002d2aac4024318235d29a2a0f758743aae","first_seen":"2024-08-19T14:11:10.396869Z","last_seen":"2026-05-11T12:45:12.735124Z","times_seen":12,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/2.1.1/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.20","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:07.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 03 Apr 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"58:76:03:0C:93:D1:CD:E1:B0:EC:46:C0:4E:0B:04:86:E4:80:3B:93","sha256":"20:3D:7B:D4:00:D1:45:86:5F:27:E9:99:0E:00:64:64:58:38:47:BE:A5:CE:E8:D4:04:AF:81:88:25:F2:0A:01"}}},"request":{"raw":"GET /jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 22 Apr 2026 18:27:08 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84280,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-06-08T02:28:42.746397Z","times_seen":10048,"resource_available":true,"data":null}},"time_used":1208,"timings":{"blocked":484,"dns":4,"connect":206,"send":0,"wait":224,"receive":0,"ssl":287},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_ltc.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ltc.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=ltc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ded010682a0fec464d7d01be53e75666","sha1":"0fdc7f13d82445a8e6096fc04a76997a8718adb1","sha256":"8582e0952e841272cd9c6defdfc6ada3f00d5ef9142f75daa65ffc4c41d68eb1","sha512":"8e098db5c576edb98ce69ad936a2c9f3784f4192e9f5267fcd4a9cf5d1d15130989be59d47635a72bc34f31c058d80a5fe3110358e88cf658705bb6fb109627d","ssdeep":"","tlshash":"adc012d0773404250d7197d198d5070e585c4986e49446495bfec7f8256c81d3712c54","first_seen":"2026-04-22T18:27:35.433734Z","last_seen":"2026-04-22T18:28:09.604337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_cczl.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:08.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_cczl.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=cczl"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":200,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2a6f6e7c84b11dbd0d87725b52d7ce32","sha1":"6f444b70c6c09238c6ffeb16a0c7eb25c9a45a5b","sha256":"e5507af0ab5b247bf09995ddce9711269033537ae63b91163b8258edba27c0fc","sha512":"bb04b97c0fce59d306889b9b279531b4589d510918cfec71b6335d1bde081a8b60510a4d82041e275da7d5bf608fb6880391dde16a6997e9e91ffe57c7f6fa67","ssdeep":"","tlshash":"11d012d03e354425c2b28fc175f4376e645df44ec4c286069aeec730656e529b11dd10","first_seen":"2025-12-23T02:13:20.557835Z","last_seen":"2026-05-11T12:45:12.749223Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_btc.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:16.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86292f552dc36f34f71346f293994be9","sha1":"122541b667cd7650166646d96b2fddf0acc0f3f9","sha256":"34f2167873019ddb575e2ac3a5d33714664a1aff81a8eb52dbf3d72ea8304851","sha512":"d16e5630b53c179855892ca0b60ee40a85fbfc5c6c2a9c48f829a997ab771f5b69287e8666b8d75feac2b02b9b1bd2c43a2f733f61e24d2b5e7beed4bd239337","ssdeep":"","tlshash":"4ac012e02b3555210c72e7d595e5079f549d4097c0c4424d5afd8ab9657c01c3523e54","first_seen":"2026-04-22T18:27:35.445612Z","last_seen":"2026-04-22T18:27:35.445612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_eth.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:20.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f521e9ab0cd8eeb8a4ef0ca413ef637","sha1":"f6bdf1d6aa77d490e98f785a987e79af85cf48d2","sha256":"9efe04320c37ed44a402e6064dd0ebb31364d08dbe380b67d64adf952b4db9f9","sha512":"89324562887d4cc5140554fe740965d312ab310abfe930813b53fb7ebe943214f6ccc8903f920062fa9c3a9a67019a769eb3d87f8050dd6c2e6cd513a5dd13b4","ssdeep":"","tlshash":"8bc022a8bb3205550c20e3f1a4c40b0e610d0087c0c0834eaafc8baa056821c3307c28","first_seen":"2026-04-22T18:27:35.455068Z","last_seen":"2026-04-22T18:27:35.455068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ydfc2026.top/Ajaxtrade/obtain_eos.html","fqdn":"ydfc2026.top","domain":"ydfc2026.top","tld":"top"},"ip":{"addr":"134.122.182.60","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ydfc2026.top/","date":"2026-04-22T18:27:23.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ydfc2026.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Apr 2026 13:00:00 GMT","end":"Sun, 19 Jul 2026 12:59:59 GMT"},"fingerprint":{"sha1":"A7:FF:02:79:0F:E1:12:1E:5F:32:1D:0D:D1:C0:F7:1C:F2:13:90:5E","sha256":"99:22:5F:92:26:08:DA:3C:97:0A:4E:27:76:B5:9B:6A:51:78:BB:FC:F8:BB:54:14:54:8B:84:58:B2:8C:96:EB"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos.html HTTP/1.1\r\nHost: ydfc2026.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ydfc2026.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ydfc2026.top/\r\nCookie: PHPSESSID=tbbdhqq2e4eipiit1bb5s80uq1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 18:27:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-01T14:39:11.901324Z","times_seen":318,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}