{"report_id":"2ed93339-db14-4203-9332-c25335efa3aa","version":0,"status":"done","tags":[],"date":"2026-09-29T05:15:32Z","url":{"schema":"http","addr":"btcexjtuas.org/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":0,"asn":8796,"as":"FASTNET DATA INC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"title":"Btcexjt","dom":{"size":28944,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22485)","md5":"e65ea7804fcea04bebac1262e0c7455f","sha1":"a47ca50a6348004800785b0054b60efcfe7ad933","sha256":"d57287a7ec407a398cf10b4e810e51061ef24e7a5c99a86b88bd87c759c005aa","sha512":"91c0447e5060afb123684159f4d762c912a0a623f0d8104eeca26add4e4e870328793bbb55da797ae1a6512c149d3357a9b8b8b5ec81d540d41e330f1b5b81e1","ssdeep":"768:gnOsA2nbJnQxQW2jDW4A4O+4De4DuxbT2zAm1URCmWsu8OtJDd+FKdUc9XoGu8Ex:gnOsA2nbJnFWWDW4A4O+4De4DuxbT2z8","tlshash":"dbd222b1e0465aa282fb9dc1e5617e1e76d2f30f811ac9803abcd58a1fc3cf5f961464","dom_hash":"domhash2508cd292c1a57fab1bf042db8387d6b","first_seen":"2026-09-29T05:15:58.694728Z","last_seen":"2026-09-29T05:15:58.694728Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"btcexjtuas.org/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":0,"asn":8796,"as":"FASTNET DATA INC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T05:15:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"assets.kraken.com","ip":{"addr":"104.17.189.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-04-03","domain_rank":854257,"first_seen":"2019-10-31T16:08:46Z","last_seen":"2026-09-23T16:22:24.734869Z","alert_count":0,"request_count":9,"received_data":106074,"sent_data":5006,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"btcexjtuas.org","ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":38,"request_count":38,"received_data":2840253,"sent_data":17561,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"webapi.btcexjtuas.org","ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":15,"received_data":23500,"sent_data":8099,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"heco.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-06-19T02:24:37.940355Z","last_seen":"2026-09-23T16:09:47.28823Z","alert_count":0,"request_count":16,"received_data":1951735,"sent_data":9070,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btcexjtuas.org/assets/filters-e9047a60.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"35577a826a3059adc0c758e209e96fe9","sha1":"b2c858d651a925f315df1d06d06c1f48e84fc614","sha256":"1438c70b4bf4a191dfd9f6ef5d806c2d23c3ba87b250a6adff05ee16216a9dc3","sha512":"1614d338791c95d73e237a392c4e1fc11df45f2c2039712c5cb541c50b29fd4497b13ddcaf48dffa7ffe6d4b0da10239386e1d3787d28a03b5d8e1e1215d0ed1","ssdeep":"","tlshash":"f96114edfcd7613746fa6ae90028455172ceae20785e0e49f58bd045597388ce0bfb64","size":3448,"data":"","first_seen":"2026-07-17T15:22:26.646202Z","last_seen":"2026-09-29T05:15:58.70806Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-10-04T20:57:56.191707Z","times_seen":10460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-10-05T01:14:24.250924Z","times_seen":15571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ff5afce542f06020b1024beba67a1ca","sha1":"8232c628793a03b8c10d9d2535a156d3dc75cddc","sha256":"8d67b160ada0ec5c057d46a46c20ac8b31ce5708e2451976c06c1a3afd60b881","sha512":"651f6e3c61ecdacbd05ae0d9c43b2c65869fa53a35a57474c03ef60618b148988eae6bb16b93f1cc64b38bd24a78486bffa947e73458fbc5f53d94d6f2a50c80","ssdeep":"","tlshash":"7e116bfe191a612a6303404e976b7911643660e9401a185173cc9b9dbb9abadd0cbb8d","size":1034,"data":"","first_seen":"2026-07-17T15:22:26.666017Z","last_seen":"2026-09-29T05:15:58.775259Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-10-05T06:30:03.942527Z","times_seen":49433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-10-04T21:49:20.212257Z","times_seen":50650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/en-24bed9dc.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e722c2fd8e35dca19c2cd2685b8eeed5","sha1":"bf250cbe4d4c4498baef6b67b9a1bc9394f586c4","sha256":"bd8cf5641d6e06c096f5e155526cae0483357654ddb4c3b7f40669cf64f6f574","sha512":"83596db4645625c38e31912f78b7405426bc90d8217e76eb870cc69c603daff6b7668f8593f07af33089d4056bbbb3c5f0c2aae3723714eef8249a50aa4513c6","ssdeep":"768:vHWvMI8mfW6fpaOh47OQA1PxDR+6oSfRHOpZcEw/oPrs55v2JzLLWz1DagXa:vHcF8QPFPf3poTsuJzLLWz5aGa","tlshash":"2713d7897e1a989a04f3537674ce6e1120f60ac28255881f4fedc9fd53d2b67a363b34","size":41639,"data":"","first_seen":"2026-07-17T15:22:26.608532Z","last_seen":"2026-09-29T05:15:58.717406Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-10-04T06:19:54.802719Z","times_seen":7591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-29T05:15:58.779256Z","times_seen":7295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-10-03T02:47:11.949799Z","times_seen":7280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-10-04T06:09:08.729435Z","times_seen":7622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-9140188e.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"550bd1f7dd4c1c83dd81f186351c82cd","sha1":"1cc43959232419fa0000627533383d5b386694f5","sha256":"04743f84a8d292cb5af896ac0ad86dc984ac966a3397dea09b873c3382180abd","sha512":"a962db56fccbe4ed55117e77abf968f1612119fa3c9f8cb239e5a2b483319517cd93561b39bc4cb599655b1f30ac76ec76f00fc1fd7f5e81e7f1658f476c128e","ssdeep":"1536:02E/+KgZKITLfQcA01OR94HSErVkKq+TNHDI1IHV1:hTKgZKIT0794HSErVkKq+Go1","tlshash":"bea35c9e550a1fff5dfd0d08799a891021f82f83588c8c9373ae6e5927f6cf42289719","size":102402,"data":"","first_seen":"2026-09-29T04:54:32.108917Z","last_seen":"2026-09-29T05:15:58.700479Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-4971824c.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad315b75c8a2aa3f4b3928df97c62c88","sha1":"ef19e2aa55145ff1fb97bbba119b4e96e225c60b","sha256":"b2e02af084b0c2166ff77eb7f365eb3d3c76602c5866be4cb772b0d9d46543ba","sha512":"457600cd2741d3b0fd0c928d7be2d7cddfcba4eb37f7e70e54ee211c25ddeda0246cb4968912f87d965082484dd77655621b0858b7c2bcc17d6797cf9090927c","ssdeep":"384:PVmTu8DiFFPFgSmfUxUDgx/lH1ZuJh/gw2Gm43HC5fBWKSF:tF37gSmfUN4oGm43HC5fBWKi","tlshash":"f452c596f9069a3cf5fba85140880010762e7fdf500d89e2b8bd6d866752efcbb4971c","size":14017,"data":"","first_seen":"2026-07-17T15:22:26.650145Z","last_seen":"2026-09-29T05:15:58.751646Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-10-05T01:26:01.483431Z","times_seen":7696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-29T05:15:58.7821Z","times_seen":6290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-9381f3a4.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f643c39e28a65ddda93b1b5844db436","sha1":"2ddd2312a127d4778a887c3ae52273fbf5dc0fb0","sha256":"a5e71ec69e1e4db4870aa6e7671cde949f17d7ab1788eaeb1d3b532192ed164c","sha512":"9fd7c24cefa08cdd1f2b011e3bbcebf4dcfd2df439a15fad2b2d92963aadd9144a358a5c103495730d74c70c34554b54303f07c46ff06a0ed9f3447424daed68","ssdeep":"","tlshash":"7cf0c96fb96a80b21bb388e8a1630820ba181b5a2754c4a4d4c71a14c7748e7e16e214","size":510,"data":"","first_seen":"2026-07-17T15:22:26.603118Z","last_seen":"2026-09-29T05:15:58.716873Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-10-04T00:22:14.884336Z","times_seen":6964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-10-04T00:22:14.668579Z","times_seen":933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/vendor-27943b52.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa015e144b5c9ff5941aa3da431c7448","sha1":"811f57ad1a1d863a6e108e951fa873b789dcbdab","sha256":"c07b2afecca21cf13570b6db45f8f2bd14d409348bf35bea29cd5bebf394819e","sha512":"bf1e14b89a5aa25ee1b0e7e3d0b24243e3b18005971219f47c41212dd49e87bf5550e66642f7375cefd017e58bb8220083aecb10d5fe85e72f560ee1de4f9e64","ssdeep":"12288:WBIeWkKlYRnK0Asm9r+0LwY0tv68WNnDigQD26CWr1TVqVMpjkoKi:WBIewgKpsf0LwY8v6Rd56CWr1TVZkoN","tlshash":"a3153ac97692f06147ab20e240bb0006f33d6e59740e8494f16999eb7d7ad89d2b7f3c","size":929393,"data":"","first_seen":"2026-07-17T15:22:26.661296Z","last_seen":"2026-09-29T05:15:58.715754Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/charting_library/charting_library.min.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-10-04T06:39:22.605211Z","times_seen":7403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-c9cc67e9.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7467906224b372f579d040e3adb3826","sha1":"6b5540ca06bf9f873bb6eddd013145b1d9b5d65a","sha256":"db47b5fe11b138253b71ce98e66e357cca9cd851c125caab2df70b75739c2bb8","sha512":"7647084f4f08a9adadadc7014f1021c5faf8eb31c17e55fce3b314a35d4170413bdf1339b2240cd1477096b425afe1104ff7f3961e4a604fa08954cad59634ec","ssdeep":"96:Cgd+vQt9Yj5ZqD+wSdzQ5ytb/3tiL9qSAB3hPq3cd4oyjT6:n+vQPYjXqiwSpSytbPwRUBhiC2T6","tlshash":"18a1c99cf80245f9d97354455458002121cc3bf7f1988cf6f7bdac4967b8a79d6d4362","size":4856,"data":"","first_seen":"2026-07-17T15:22:26.618239Z","last_seen":"2026-09-29T05:15:58.701601Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-1daaf918.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdfe42a3c9ed80c67eda0c2ff497ed9d","sha1":"313023589e60311192ae6307b79ee000d1c7600b","sha256":"1fb6b3bd98845f8b4c5c0f94e6f6e2bd68ded61ebf260333af0bcd0cab94cb91","sha512":"a3c93f62ecf791d991226f0eb4cb3422188d7bad65ffcbac87597b5fa62ed48380f5f3ab924900da62ff27d0a9d6cd7e547907257b3a5282523d8c0ed1946df1","ssdeep":"","tlshash":"a101fdf9fc0d8ebb0ea20a4002a0260014491fddfa1419f198867d6a1be4950d7ce32d","size":776,"data":"","first_seen":"2026-07-17T15:22:26.619736Z","last_seen":"2026-09-29T05:15:58.722882Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-29T05:15:58.784045Z","times_seen":7045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-29T05:15:58.784824Z","times_seen":554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-10-03T21:29:34.461026Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/currencyItem-aa794a24.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b15b4d1c6401e2c542badda68da246","sha1":"0cafbccc81494a296293b1061733ec0c9aa2a71d","sha256":"d3c44c254991c23261cc7fffb926f645974016509dde1b9160c2bbba2cfd7d88","sha512":"c0d1b27582e4e9f0737e75d25d786a7fba6e916ebde6b95dc95de722051b166726d928e0afc1fa13e36cea556b7574486e11e629e027f7e4a970b664605c4515","ssdeep":"","tlshash":"fb21af9aa902c7b1cbbe556281bd5414170d7fea701185c1ebed148a37876fcd728a31","size":1206,"data":"","first_seen":"2026-07-17T15:22:26.663021Z","last_seen":"2026-09-29T05:15:58.721489Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-29T05:15:58.789987Z","times_seen":1150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-29T05:15:58.790797Z","times_seen":6506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-10-04T00:16:23.613108Z","times_seen":8081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-10-04T06:39:22.665937Z","times_seen":2014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-29T05:15:58.793422Z","times_seen":1151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1831de11b3f834a2de4166013d75eda2","sha1":"4cd45ddc173078df52a6a5da8ee597fc7b8fa84b","sha256":"890bb39f44fdd8c6b918239d60c90dce9fd3fae1b9b2049c5a0e9f80f02c8009","sha512":"7e4471d6a84fcda0c90b1ef370a7ac6853bb28d5fe3de1f3955f2cd491853b7b07f7eab7a9df9731f584e664d59606ca969359d613ca46193c9a31e392fa594b","ssdeep":"","tlshash":"b9c08cc4b0c36e103a26a450a1af34e4d0248027b04c1b139da8e88d2e630f18233e98","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-29T05:15:58.794073Z","times_seen":865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/#/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-29T05:15:58.795131Z","times_seen":1137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"btcexjtuas.org/resource/svg/light/user.svg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.510Z","timestamp":1790658902510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 551\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\netag: \"6794485c-227\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":551,"size_decoded":823,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-29T05:15:58.696671Z","times_seen":488,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/common/type/defi_activity_type","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.547Z","timestamp":1790658902547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":635,"size_decoded":882,"mime_type":"application/json","magic":"JSON text data","md5":"0247380291f1304bd2d3f73a2943ead3","sha1":"200fc95001875e8e6705b345140667b5fda57628","sha256":"150216ed3bda66a37126ec1025c8ef6231d0a6686b164c93dc8bfee56a2a605c","sha512":"b7a77b7306596f8784a6713a79054fec0705572b98c75af2e1041bb48b349f5bf236c4ea67ca04c1358170df90f1105716a6191d9d1388f54c1d8a3fdf4ff5a2","ssdeep":"","tlshash":"84f028143c3dcebf098f65e745ec7804299c052794b0fca05cab0f3c5ae4172048920c","first_seen":"2025-09-23T09:29:39.75781Z","last_seen":"2026-09-29T05:15:58.697925Z","times_seen":4,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp55f53f107598465c8231e9a11cf3a29a.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.596Z","timestamp":1790658902596,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp55f53f107598465c8231e9a11cf3a29a.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109572\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB4957E613583937944FC3\r\nAccept-Ranges: bytes\r\nETag: \"440CBE77674A730D672DE16899862FFB\"\r\nLast-Modified: Tue, 08 Apr 2025 17:30:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5053394575354269543\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RAy+d2dKcw1nLeFomYYv+w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":109572,"size_decoded":110148,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"440cbe77674a730d672de16899862ffb","sha1":"8cf70e0ed50ce4ef8d0185d45abc121ee0525cae","sha256":"42d66c6c6f9483e678f137b9cd29c14c88bedf815dcb7454d7cd03160c923d6a","sha512":"4754244bc1be99df8f456441cefb8dc13787b841cd840b473f634ac78265ef613857dc6d1450908b5412cee5e6b7d09f16fbf31b90185914439e20746975221c","ssdeep":"1536:6GE8uzA+S4xqE83K7O5zETHz3TPFQ4Ix2xg/YuDQ9nTBZyX7+oz7dB5zQOXquOme:C9qUS0HXuz4kd71b5QBu7NQ","tlshash":"99b302108f94d7c8d7172f35469e8ad1befa14ad34036e972bfa490b2d5aa748c0cdc6","first_seen":"2024-08-29T18:12:05.89455Z","last_seen":"2026-09-29T05:15:58.698569Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1654,"timings":{"blocked":1074,"dns":0,"connect":0,"send":0,"wait":283,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp2ca546ee44044beea5878aabc5a8183d.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.598Z","timestamp":1790658902598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp2ca546ee44044beea5878aabc5a8183d.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 239195\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB4958AFAD5B39396D2669\r\nAccept-Ranges: bytes\r\nETag: \"6AF00FF8B88B635BCFAE7B63FB73F63E\"\r\nLast-Modified: Tue, 08 Apr 2025 17:31:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18217933153706741951\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: avAP+LiLY1vPrntj+3P2Pg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":239195,"size_decoded":239772,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"6af00ff8b88b635bcfae7b63fb73f63e","sha1":"c7c004eb309b3f3fd26a7e1e2654a7956de69f1f","sha256":"71522f2099167c896b3d5ab5d90391404a7c870cfdfa6f383a814f7d1af1fad1","sha512":"04203c46cb2ad1412789250d169a6affccc40bf85f04e7c88c756163fb647519b1477876f46fae6e386658aff21f8e70b7cc64f1745754da5e435eac8aef866c","ssdeep":"6144:UnE2BVTNiD//GLbVrXKO9w4tGZz1UVf9URf:UE2BBE/GLbIO9dt+GgV","tlshash":"a3342314d580e5e1c6b1833a59efa267b35f307cb3a20d7768e45533cbb8aa1ab10f51","first_seen":"2024-08-29T18:12:05.907057Z","last_seen":"2026-09-29T05:15:58.699792Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2400,"timings":{"blocked":1767,"dns":0,"connect":0,"send":0,"wait":309,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-9140188e.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:14:59.666Z","timestamp":1790658899666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/index-9140188e.js HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:14:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Aug 2026 05:00:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e72f9-19002\"\r\nexpires: Tue, 29 Sep 2026 17:14:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102402,"size_decoded":28119,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"550bd1f7dd4c1c83dd81f186351c82cd","sha1":"1cc43959232419fa0000627533383d5b386694f5","sha256":"04743f84a8d292cb5af896ac0ad86dc984ac966a3397dea09b873c3382180abd","sha512":"a962db56fccbe4ed55117e77abf968f1612119fa3c9f8cb239e5a2b483319517cd93561b39bc4cb599655b1f30ac76ec76f00fc1fd7f5e81e7f1658f476c128e","ssdeep":"1536:02E/+KgZKITLfQcA01OR94HSErVkKq+TNHDI1IHV1:hTKgZKIT0794HSErVkKq+Go1","tlshash":"bea35c9e550a1fff5dfd0d08799a891021f82f83588c8c9373ae6e5927f6cf42289719","first_seen":"2026-09-29T04:54:32.108917Z","last_seen":"2026-09-29T05:15:58.700479Z","times_seen":2,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-c9cc67e9.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.681Z","timestamp":1790658900681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/index-c9cc67e9.js HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-12f8\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4856,"size_decoded":2478,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4849)","md5":"b7467906224b372f579d040e3adb3826","sha1":"6b5540ca06bf9f873bb6eddd013145b1d9b5d65a","sha256":"db47b5fe11b138253b71ce98e66e357cca9cd851c125caab2df70b75739c2bb8","sha512":"7647084f4f08a9adadadc7014f1021c5faf8eb31c17e55fce3b314a35d4170413bdf1339b2240cd1477096b425afe1104ff7f3961e4a604fa08954cad59634ec","ssdeep":"96:Cgd+vQt9Yj5ZqD+wSdzQ5ytb/3tiL9qSAB3hPq3cd4oyjT6:n+vQPYjXqiwSpSytbPwRUBhiC2T6","tlshash":"18a1c99cf80245f9d97354455458002121cc3bf7f1988cf6f7bdac4967b8a79d6d4362","first_seen":"2026-07-17T15:22:26.618239Z","last_seen":"2026-09-29T05:15:58.701601Z","times_seen":4,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/doge.jpg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.569Z","timestamp":1790658902569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /doge.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-51d3\"\r\nexpires: Thu, 29 Oct 2026 05:15:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20947,"size_decoded":21176,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"48bc32bbaa8a316d1c23b407a8799288","sha1":"ebbc136231178bf80a0acfc6959d9b45bbecf8c8","sha256":"1d314e4d387716d3fd74aa993012cfb3397b1ebb5d8da271abac8cd034c0ef0e","sha512":"4418e4ed86d263063d20a94caf4bac177156772563f97d317a6f1aec79a6f90488a8a11d4a6a79e5c2668661ff53835fecd7787ef71c9edf3e8510266d86c5e7","ssdeep":"384:3BZ5UXLdHFv7YGA7PQiawWq7wPf5tFzU4yQEbEx5Gct1zTM31qZJaE4D:xZ5UbpFv7GPQiawxUPfrFHyQEbEx5BX+","tlshash":"6892d0a98b96359bcf527772398bf95b30074e17084786f68b04e0b40e7059ebc7ca23","first_seen":"2025-06-19T02:24:45.74065Z","last_seen":"2026-09-29T05:15:58.70581Z","times_seen":14,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp60614724ddfc40fca556b61f55b30e3e.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.592Z","timestamp":1790658902592,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp60614724ddfc40fca556b61f55b30e3e.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 244944\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB495868F5793238F652E6\r\nAccept-Ranges: bytes\r\nETag: \"99541A4058432FC8B2DF9AD26D6EEE3B\"\r\nLast-Modified: Tue, 08 Apr 2025 17:29:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11562487344152512719\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mVQaQFhDL8iy35rSbW7uOw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":244944,"size_decoded":245521,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"99541a4058432fc8b2df9ad26d6eee3b","sha1":"689593ccf0b44704b19aa67f8d43c204801d5975","sha256":"be4ff66527bf4e4a48af64fa49481b6cca9864d9afe563630744a2204d7ecc94","sha512":"d67de09d3b9313f66a0513fd8a322362b3c2b6ad26466e687e81540a59e5ca9769d60ad33508047e08aa7cad9f1d70c71eb9beea508fd5cffdc67ae1d0ba7193","ssdeep":"6144:gRGn1e5WwkyFUwG1oChc+UBO95+eHQ+cBKVkeJLWd1H1f7POv:De5laHdJmO95+bObJLWdTjm","tlshash":"9134230ba890a155f8e07f5328dd5db719aa385ff7c8b158c49ea4e93522314fc7af02","first_seen":"2024-08-29T18:12:05.90357Z","last_seen":"2026-09-29T05:15:58.706871Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2254,"timings":{"blocked":1668,"dns":0,"connect":0,"send":0,"wait":285,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpef3a5cbc336f4438aac0ebb706604f70.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.595Z","timestamp":1790658902595,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpef3a5cbc336f4438aac0ebb706604f70.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109572\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB49587CD23C3335B5287E\r\nAccept-Ranges: bytes\r\nETag: \"440CBE77674A730D672DE16899862FFB\"\r\nLast-Modified: Tue, 08 Apr 2025 17:30:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5053394575354269543\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RAy+d2dKcw1nLeFomYYv+w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":109572,"size_decoded":110148,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"440cbe77674a730d672de16899862ffb","sha1":"8cf70e0ed50ce4ef8d0185d45abc121ee0525cae","sha256":"42d66c6c6f9483e678f137b9cd29c14c88bedf815dcb7454d7cd03160c923d6a","sha512":"4754244bc1be99df8f456441cefb8dc13787b841cd840b473f634ac78265ef613857dc6d1450908b5412cee5e6b7d09f16fbf31b90185914439e20746975221c","ssdeep":"1536:6GE8uzA+S4xqE83K7O5zETHz3TPFQ4Ix2xg/YuDQ9nTBZyX7+oz7dB5zQOXquOme:C9qUS0HXuz4kd71b5QBu7NQ","tlshash":"99b302108f94d7c8d7172f35469e8ad1befa14ad34036e972bfa490b2d5aa748c0cdc6","first_seen":"2024-08-29T18:12:05.89455Z","last_seen":"2026-09-29T05:15:58.698569Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2076,"timings":{"blocked":1702,"dns":0,"connect":0,"send":0,"wait":295,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/resource/fonts/Arial.ttf","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.478Z","timestamp":1790658900478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btcexjtuas.org/assets/index-8872f3c9.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Mon, 14 Oct 2024 01:55:32 GMT\r\netag: \"670c7a14-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047301,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-10-04T06:39:22.630841Z","times_seen":8336,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/filters-e9047a60.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.692Z","timestamp":1790658900692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/filters-e9047a60.js HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-d78\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3448,"size_decoded":1577,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3425)","md5":"35577a826a3059adc0c758e209e96fe9","sha1":"b2c858d651a925f315df1d06d06c1f48e84fc614","sha256":"1438c70b4bf4a191dfd9f6ef5d806c2d23c3ba87b250a6adff05ee16216a9dc3","sha512":"1614d338791c95d73e237a392c4e1fc11df45f2c2039712c5cb541c50b29fd4497b13ddcaf48dffa7ffe6d4b0da10239386e1d3787d28a03b5d8e1e1215d0ed1","ssdeep":"","tlshash":"f96114edfcd7613746fa6ae90028455172ceae20785e0e49f58bd045597388ce0bfb64","first_seen":"2026-07-17T15:22:26.646202Z","last_seen":"2026-09-29T05:15:58.70806Z","times_seen":4,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.543Z","timestamp":1790658902543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549,"size_decoded":994,"mime_type":"application/json","magic":"JSON text data","md5":"6be934239b844eca14837c1202c61f4f","sha1":"ded0eceb4087c72696d8e65ca8db72eb149b84cc","sha256":"8686a47291fa4620f5bc16794d3569a4b1f67e8c4734e7337d59ba7689228b68","sha512":"e053c1be3e26f880409963df48cc442bf49795e6f64abb19354602bbdd2aad44e8d86a9d5110d6323196f42065074a47d5d987cc6a3b84161451a2eab8678215","ssdeep":"","tlshash":"73f08b5e66789eb50c0408c794c9bccd924e1647d770cc305596cfa880f45b71a06508","first_seen":"2026-07-17T15:25:04.462492Z","last_seen":"2026-09-29T05:15:58.709242Z","times_seen":2,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/resource/svg/light/mengbanzu13.svg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.557Z","timestamp":1790658902557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794485c-4b2\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202,"size_decoded":894,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-10-04T06:39:22.645616Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_yfi.webp?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.189.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.571Z","timestamp":1790658902571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_yfi.webp?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15086\r\ncf-ray: a42881fd5f8f23eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1285\r\ncache-control: public,max-age=86400\r\netag: \"2f7b9cf3538c5bdaa1ea95c975ce15d2\"\r\nlast-modified: Tue, 03 Mar 2026 01:47:03 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=0LMXdNqg_JGxW_HJIDHeYSYH4.p1TC4SAMw6JOE66qY-1790658902.6144912-1.0.1.1-aGbNcdlMF2jGrZ5XqWUpLUIJWJYYsVLymJaAV14cLkubTy.UdM308pHnaIoqTNeOlZyx_iOd5CQ7YKhkgxw_msPXuIyYqOBb8gCeC1q5Vn4S5vt8QXRYr0ZdvLJAGpVY; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"0LMXdNqg_JGxW_HJIDHeYSYH4.p1TC4SAMw6JOE66qY-1790658902.6144912-1.0.1.1-aGbNcdlMF2jGrZ5XqWUpLUIJWJYYsVLymJaAV14cLkubTy.UdM308pHnaIoqTNeOlZyx_iOd5CQ7YKhkgxw_msPXuIyYqOBb8gCeC1q5Vn4S5vt8QXRYr0ZdvLJAGpVY","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:45:02Z","raw_expires":"Tue, 29 Sep 2026 05:45:02 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=0LMXdNqg_JGxW_HJIDHeYSYH4.p1TC4SAMw6JOE66qY-1790658902.6144912-1.0.1.1-aGbNcdlMF2jGrZ5XqWUpLUIJWJYYsVLymJaAV14cLkubTy.UdM308pHnaIoqTNeOlZyx_iOd5CQ7YKhkgxw_msPXuIyYqOBb8gCeC1q5Vn4S5vt8QXRYr0ZdvLJAGpVY; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":15970,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2f7b9cf3538c5bdaa1ea95c975ce15d2","sha1":"d4c3de4d13c267563b6472e0b0a1e4c30402fcde","sha256":"c5ff67b2363b96bd09f8c6eba4bad64b4a0f58e64be284a93f42d39189025ec5","sha512":"3572fc7b8c636d3ad23d7373899b03dd4cadcc5a9681d80f8d0eb3a9ac1061c3ad7cffbd1c11e2e619e852f9b48852c541349b139ae6546d1196b525642a251d","ssdeep":"384:Y+mzRPplwLM6IMqq5zNHqfYZKAlkaW+rkXhqpj8WeE:5mlfwL+sB0wZKAlk1fqF8XE","tlshash":"e962d00cc59292f349e6c115ecc5821390ec72a4496fbf34a5fc9986713ae9edda0e54","first_seen":"2026-07-17T15:22:26.635325Z","last_seen":"2026-09-29T05:15:58.711627Z","times_seen":13,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":14,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/platform/dev/favicon.ico?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:01.181Z","timestamp":1790658901181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:01 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\netag: \"6794485c-10be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":4559,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-09-29T05:15:58.712245Z","times_seen":157,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_fil.webp?i=kds?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.189.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.577Z","timestamp":1790658902577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_fil.webp?i=kds?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10376\r\ncf-ray: a42881fd5fa023eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1285\r\ncache-control: public,max-age=86400\r\netag: \"7d825dc4491dd0a4b97bd92e0ce30fc6\"\r\nlast-modified: Tue, 03 Mar 2026 01:43:24 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=D_7owbCnswrSIkfIRgc2VCWksTSkVcuqWyenN4qMWJg-1790658902.616688-1.0.1.1-i9rZpJs2qpSDOrP9vDbEwSA7Gd_EDctp7SrT_xukCyhQh12LOYd_srjWZAiAwEuWefR02f0tZ28rnR5cpsnbLHXgYtzjRVWNsJjhdQZxy7QHVqJENtsiDhcKqfMr71mw; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"D_7owbCnswrSIkfIRgc2VCWksTSkVcuqWyenN4qMWJg-1790658902.616688-1.0.1.1-i9rZpJs2qpSDOrP9vDbEwSA7Gd_EDctp7SrT_xukCyhQh12LOYd_srjWZAiAwEuWefR02f0tZ28rnR5cpsnbLHXgYtzjRVWNsJjhdQZxy7QHVqJENtsiDhcKqfMr71mw","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:45:02Z","raw_expires":"Tue, 29 Sep 2026 05:45:02 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=D_7owbCnswrSIkfIRgc2VCWksTSkVcuqWyenN4qMWJg-1790658902.616688-1.0.1.1-i9rZpJs2qpSDOrP9vDbEwSA7Gd_EDctp7SrT_xukCyhQh12LOYd_srjWZAiAwEuWefR02f0tZ28rnR5cpsnbLHXgYtzjRVWNsJjhdQZxy7QHVqJENtsiDhcKqfMr71mw; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10376,"size_decoded":11259,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d825dc4491dd0a4b97bd92e0ce30fc6","sha1":"56cf5516c736b46055921198c5a838104ee724e4","sha256":"12d4d97086193b009ecf778fa83a11b88f358add84d89a06560d3cf2ba916d4c","sha512":"d5bd6497932b56573c54e6dcdb54cebc0997cbfd94f17650ff32a64bd7742b42ef897b0e6d67ec885dbf7e5bcd1ec3c9b73c2efc7c472f65c77478835909b767","ssdeep":"192:D89NAY5SmzbZ0KPwq4xcqOPBMlpnY5+FPmJePHZmy1tn8NPIo08ffADl:4+mzRP8t6BMlFWsPmJefZP1taIo0ufAB","tlshash":"b922c08e8390bb711ecc06137d52983118a642041754e81fb6eeca87f765d1e2dd6bbd","first_seen":"2025-06-04T17:05:58.568316Z","last_seen":"2026-09-29T05:15:58.712902Z","times_seen":37,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":14,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/link.jpg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.584Z","timestamp":1790658902584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /link.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-4afe\"\r\nexpires: Thu, 29 Oct 2026 05:15:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19198,"size_decoded":18921,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"bd1678707e6e3c21bfc20f0e60dd5760","sha1":"3c2166c1eb5b7457b0e802ff77e4b61a3c0793b0","sha256":"230def0f63a82232ecf8bfd3fcc75ed5ec77bdbc715ccef7a9f30d6f4aecef02","sha512":"bd5f84228b069624c916137d367aa2d6e9975c9ede3c55167614ac07e692db67cc606334e3d5dad0e4b69dd0dab7a3a65e4b00a0a556dbeac36f7c3be2bb26fb","ssdeep":"384:ADVyfTRKjNwLPKmT/z+AIMsVCR/fNCT2XqvKLlCtOXV2Yf:mgTRcNwrKgDBga6vKAn4","tlshash":"f582d0ca22172b1fd574e43a1331aa50522bb743a4d655e97066864bb43f3f9bc2fc07","first_seen":"2025-06-19T02:24:45.818803Z","last_seen":"2026-09-29T05:15:58.713717Z","times_seen":12,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpf32ba91f651d41449ff5e5950b1c3ad6.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.593Z","timestamp":1790658902593,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpf32ba91f651d41449ff5e5950b1c3ad6.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 112629\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB4957794D10383715B4F7\r\nAccept-Ranges: bytes\r\nETag: \"0DAEADD93DED6B3C5DE34CB17C18387C\"\r\nLast-Modified: Tue, 08 Apr 2025 17:28:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13231990931681428578\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Da6t2T3tazxd40yxfBg4fA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":112629,"size_decoded":113206,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"0daeadd93ded6b3c5de34cb17c18387c","sha1":"17c2516cf0fe410cbf3abd29efe0081359ad0a1e","sha256":"be91fd0aa507b5779e9a0b38fabcc784536965a9f20bc1444343e584049d7e25","sha512":"882a4ef0f7d72e4903e51978ebcd7cbcbf3ab1f41ca7ede53212588e1c88db37e0b2d393fa0edc27ae63c7d4d9d910d845eaf88612ed3928038f68ea1d97f5fc","ssdeep":"3072:e0WEjagrkdEB58/3MQDPQiktwaKqAUkS61dm3LcL:e1sku4/3MLipa0IJI","tlshash":"61b302f2a3306546e0bd4570a3e69f7d875f0eb65046c5733829df7684060c4caabaeb","first_seen":"2024-08-29T18:12:05.895827Z","last_seen":"2026-09-29T05:15:58.714291Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1448,"timings":{"blocked":-1,"dns":1,"connect":281,"send":0,"wait":290,"receive":311,"ssl":565},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/vendor-27943b52.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:14:59.669Z","timestamp":1790658899669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/vendor-27943b52.js HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:14:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-e2e71\"\r\nexpires: Tue, 29 Sep 2026 17:14:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":929393,"size_decoded":305377,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"aa015e144b5c9ff5941aa3da431c7448","sha1":"811f57ad1a1d863a6e108e951fa873b789dcbdab","sha256":"c07b2afecca21cf13570b6db45f8f2bd14d409348bf35bea29cd5bebf394819e","sha512":"bf1e14b89a5aa25ee1b0e7e3d0b24243e3b18005971219f47c41212dd49e87bf5550e66642f7375cefd017e58bb8220083aecb10d5fe85e72f560ee1de4f9e64","ssdeep":"12288:WBIeWkKlYRnK0Asm9r+0LwY0tv68WNnDigQD26CWr1TVqVMpjkoKi:WBIewgKpsf0LwY8v6Rd56CWr1TVZkoN","tlshash":"a3153ac97692f06147ab20e240bb0006f33d6e59740e8494f16999eb7d7ad89d2b7f3c","first_seen":"2026-07-17T15:22:26.661296Z","last_seen":"2026-09-29T05:15:58.715754Z","times_seen":4,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-8872f3c9.css","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:14:59.678Z","timestamp":1790658899678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/index-8872f3c9.css HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:14:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-4abca\"\r\nexpires: Tue, 29 Sep 2026 17:14:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306122,"size_decoded":66790,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"8c48ff763da379b74314963b13faaeaa","sha1":"6fa61f64b3de52ae46e479da03753cd99c6fd904","sha256":"8872f3c9cb18b0f178cfed93825d04aabe174d0cb547bb99460d29f5287ad1af","sha512":"61ad3d42d9ac15275a48264273fb5ecce443f10e03e9b84ce519412e441ff63ff4e2ba954a98fb4820db6d7cb06b06841d2ec55e83325677b6fb13da50d41e0f","ssdeep":"6144:nevxsal1W9EkZ8w71ZACkFDS3vyf58rBeV05T5:ev1C9dZ8w71ZACkFDS3vyf58rBeV05T5","tlshash":"7454d6a9a590117c6f27aa759bce5ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2025-09-18T10:45:14.128185Z","last_seen":"2026-09-29T05:15:58.716355Z","times_seen":5,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-9381f3a4.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.677Z","timestamp":1790658900677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/index-9381f3a4.js HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 510\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\netag: \"6913e978-1fe\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":510,"size_decoded":861,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"6f643c39e28a65ddda93b1b5844db436","sha1":"2ddd2312a127d4778a887c3ae52273fbf5dc0fb0","sha256":"a5e71ec69e1e4db4870aa6e7671cde949f17d7ab1788eaeb1d3b532192ed164c","sha512":"9fd7c24cefa08cdd1f2b011e3bbcebf4dcfd2df439a15fad2b2d92963aadd9144a358a5c103495730d74c70c34554b54303f07c46ff06a0ed9f3447424daed68","ssdeep":"","tlshash":"7cf0c96fb96a80b21bb388e8a1630820ba181b5a2754c4a4d4c71a14c7748e7e16e214","first_seen":"2026-07-17T15:22:26.603118Z","last_seen":"2026-09-29T05:15:58.716873Z","times_seen":4,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/en-24bed9dc.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:01.936Z","timestamp":1790658901936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/en-24bed9dc.js HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-a2a7\"\r\nexpires: Tue, 29 Sep 2026 17:15:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41639,"size_decoded":13057,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (41536)","md5":"e722c2fd8e35dca19c2cd2685b8eeed5","sha1":"bf250cbe4d4c4498baef6b67b9a1bc9394f586c4","sha256":"bd8cf5641d6e06c096f5e155526cae0483357654ddb4c3b7f40669cf64f6f574","sha512":"83596db4645625c38e31912f78b7405426bc90d8217e76eb870cc69c603daff6b7668f8593f07af33089d4056bbbb3c5f0c2aae3723714eef8249a50aa4513c6","ssdeep":"768:vHWvMI8mfW6fpaOh47OQA1PxDR+6oSfRHOpZcEw/oPrs55v2JzLLWz1DagXa:vHcF8QPFPf3poTsuJzLLWz5aGa","tlshash":"2713d7897e1a989a04f3537674ce6e1120f60ac28255881f4fedc9fd53d2b67a363b34","first_seen":"2026-07-17T15:22:26.608532Z","last_seen":"2026-09-29T05:15:58.717406Z","times_seen":4,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/eth.jpg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.562Z","timestamp":1790658902562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /eth.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-42e9\"\r\nexpires: Thu, 29 Oct 2026 05:15:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17129,"size_decoded":17003,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e6ba74ee7aca970e9729ea2a96258819","sha1":"f7279d910c0e2e0e79b6920d7fedf6d40821857e","sha256":"7e3f13eb845de91e75bb893260d9f5de5d392a6dea242ca541cd0bfa46f88f78","sha512":"20a69f200aa6d4a8995e6c4edb5aab429d40f404b3e5baa04822120f998425f5fe195e72cf0968f1af177defaae4887ba1f462716f3f598a1b2e19a04c7516f7","ssdeep":"384:cQaUXlJMaqqpzybjTydlLjO1hSY+6Sgs+ZHDZAl7vZ:8UXlWkuHAohSYj/sSHDuD","tlshash":"f472c0ea16f59193d29a0ff7af288dd5c557743a598f97cae9508806d0fa0b0fc3a4c0","first_seen":"2025-06-19T02:24:45.749988Z","last_seen":"2026-09-29T05:15:58.717891Z","times_seen":14,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_trb.webp?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.189.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.575Z","timestamp":1790658902575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_trb.webp?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6902\r\ncf-ray: a42881fd5f9e23eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1285\r\ncache-control: public,max-age=86400\r\netag: \"16b15363ca61be1848bc3bf9231b0e1a\"\r\nlast-modified: Tue, 03 Mar 2026 01:46:21 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=AAKAQkrqrL6u7XUm.u2hakM4hYhFepoo2p9Mroxws5c-1790658902.6164613-1.0.1.1-Eyqn.UWyxppFsHotnz6mjx1qX13CxYKlewsmhlZUj5fOEi7m4CNPoCkWNl97e4PqmMWCRc_iWqzmtbZcs64EPA44jFSfgWU54v6D6yvpzTYmTdM9NXsZPWKeXQepMMHn; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=PyNRB.e1qeQ1DqwxwepRCxrLxjyaMfJ6EGql2H4qkWU-1790658902.6164613-1.0.1.1-t4y_8cTH7tVIrw2XqqmresBCQ5I7R7QNl484ZkGGJI2PHIU_Wzg19shrT4DPFb7rQ1ARGJiCFrZCDI.ipQPPSayNSlhR5SNu3ZJ9jEQa1_yePN7TauzuWUo0pC9ofEEtAP3j1E9pCerGRXRFBpIILVglh0ASV2G1kBa6bsGHlwY_8dCR859Xqn7qdz.oIrxC\"}]}\r\nreporting-endpoints: cf-csp-endpoint=\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=PyNRB.e1qeQ1DqwxwepRCxrLxjyaMfJ6EGql2H4qkWU-1790658902.6164613-1.0.1.1-t4y_8cTH7tVIrw2XqqmresBCQ5I7R7QNl484ZkGGJI2PHIU_Wzg19shrT4DPFb7rQ1ARGJiCFrZCDI.ipQPPSayNSlhR5SNu3ZJ9jEQa1_yePN7TauzuWUo0pC9ofEEtAP3j1E9pCerGRXRFBpIILVglh0ASV2G1kBa6bsGHlwY_8dCR859Xqn7qdz.oIrxC\"\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=PyNRB.e1qeQ1DqwxwepRCxrLxjyaMfJ6EGql2H4qkWU-1790658902.6164613-1.0.1.1-t4y_8cTH7tVIrw2XqqmresBCQ5I7R7QNl484ZkGGJI2PHIU_Wzg19shrT4DPFb7rQ1ARGJiCFrZCDI.ipQPPSayNSlhR5SNu3ZJ9jEQa1_yePN7TauzuWUo0pC9ofEEtAP3j1E9pCerGRXRFBpIILVglh0ASV2G1kBa6bsGHlwY_8dCR859Xqn7qdz.oIrxC; report-to cf-csp-endpoint\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"AAKAQkrqrL6u7XUm.u2hakM4hYhFepoo2p9Mroxws5c-1790658902.6164613-1.0.1.1-Eyqn.UWyxppFsHotnz6mjx1qX13CxYKlewsmhlZUj5fOEi7m4CNPoCkWNl97e4PqmMWCRc_iWqzmtbZcs64EPA44jFSfgWU54v6D6yvpzTYmTdM9NXsZPWKeXQepMMHn","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:45:02Z","raw_expires":"Tue, 29 Sep 2026 05:45:02 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=AAKAQkrqrL6u7XUm.u2hakM4hYhFepoo2p9Mroxws5c-1790658902.6164613-1.0.1.1-Eyqn.UWyxppFsHotnz6mjx1qX13CxYKlewsmhlZUj5fOEi7m4CNPoCkWNl97e4PqmMWCRc_iWqzmtbZcs64EPA44jFSfgWU54v6D6yvpzTYmTdM9NXsZPWKeXQepMMHn; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6902,"size_decoded":9022,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16b15363ca61be1848bc3bf9231b0e1a","sha1":"ab8571306d7a640bfc9203226b02b2a852b09859","sha256":"f54b15562cc3d76f34afb8412762786db73f38e8f2097eb7b523ffdae0e80d27","sha512":"6e73444c3f3beae399a652178992f8c48733be3260e10c71464fcbc379868fc04f5889d9653bfaea5a4f76b1fa72db44016835a039f4fe82d30fe90e6c00ea43","ssdeep":"192:gK89NAY5SmzbZ0KPwqErZzjfv125tyoup3VaoZfC:gv+mzRPBwv+tyL9C","tlshash":"d6e1af54c2e563d326e4c5c3b454681fa61c002a1157672bb692ce333b4dcde6d795fc","first_seen":"2026-07-17T15:22:26.631271Z","last_seen":"2026-09-29T05:15:58.718485Z","times_seen":13,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":15,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpe1c528d1dcd64423a69e1500717852bc.png","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.606Z","timestamp":1790658902606,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpe1c528d1dcd64423a69e1500717852bc.png HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 202197\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB4958794D10383744B5F7\r\nAccept-Ranges: bytes\r\nETag: \"815DE2BA85CDDC9B0A1EE21D33B4904A\"\r\nLast-Modified: Wed, 25 Feb 2026 04:19:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 996964040500719874\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gV3iuoXN3JsKHuIdM7SQSg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":202197,"size_decoded":202772,"mime_type":"image/png","magic":"PNG image data, 423 x 420, 8-bit/color RGBA, non-interlaced","md5":"815de2ba85cddc9b0a1ee21d33b4904a","sha1":"51257950a766a88a691d49f9925e478871406646","sha256":"c56d75259e8aa9cff489682e0169187e21b6c742f256bfcc11253e43a2e0e2bd","sha512":"c1081671b364dc91bca38627f83fc9b82650f02547b61be2f71f9084113ce439ea0275296402a2818aeff71361d6b31c21850a8d0717645c8d2993da7e12f855","ssdeep":"6144:fO1rKVC1nFFbR25/hEvvvLezV89amgPxunOkBFU3F:fcUE3R252vvDmVgln1BFU3F","tlshash":"99142380fc9d5546ebb19854e2d6dfbae7c95fc13e6c061230660c48c7aa8fd412255f","first_seen":"2026-07-17T15:22:26.583966Z","last_seen":"2026-09-29T05:15:58.719795Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2045,"timings":{"blocked":1435,"dns":0,"connect":0,"send":0,"wait":295,"receive":315,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp8a1d3a40d8384febb7747ce48e682fce.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.553Z","timestamp":1790658902553,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp8a1d3a40d8384febb7747ce48e682fce.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3391\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB495768F57932381E51E6\r\nAccept-Ranges: bytes\r\nETag: \"0E83F87B663B1CEF21354B06AE01F593\"\r\nLast-Modified: Tue, 08 Apr 2025 17:37:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10489740580964031108\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: DoP4e2Y7HO8hNUsGrgH1kw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3391,"size_decoded":3966,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3","md5":"0e83f87b663b1cef21354b06ae01f593","sha1":"e7753016588dc49f7a7d53df75958020b50abd33","sha256":"d2385c360b44175560f7af7c2bb4593ad29c4b462b751e791ec59638e9ade189","sha512":"40c06bd1c4e46dc29ac53ead0fb75548d62f36f2e6f180adbe9d03e6dc8e16e108cae727cd4a90a62e1832b340cd1ca4709cfd656c4c3c690846ffdd8829aec8","ssdeep":"","tlshash":"5c614b9b4fed4408ec04a5bda5e00fa3c2d133727f717ca775897814147a280bb605e5","first_seen":"2024-08-29T18:12:05.909426Z","last_seen":"2026-09-29T05:15:58.720667Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":-1,"dns":4,"connect":277,"send":0,"wait":274,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/currencyItem-aa794a24.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.694Z","timestamp":1790658900694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/currencyItem-aa794a24.js HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-4b6\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":955,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"f3b15b4d1c6401e2c542badda68da246","sha1":"0cafbccc81494a296293b1061733ec0c9aa2a71d","sha256":"d3c44c254991c23261cc7fffb926f645974016509dde1b9160c2bbba2cfd7d88","sha512":"c0d1b27582e4e9f0737e75d25d786a7fba6e916ebde6b95dc95de722051b166726d928e0afc1fa13e36cea556b7574486e11e629e027f7e4a970b664605c4515","ssdeep":"","tlshash":"fb21af9aa902c7b1cbbe556281bd5414170d7fea701185c1ebed148a37876fcd728a31","first_seen":"2026-07-17T15:22:26.663021Z","last_seen":"2026-09-29T05:15:58.721489Z","times_seen":4,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T05:14:58.484Z","timestamp":1790658898484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:14:59 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 10 Mar 2026 04:20:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af9c0a-1478\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5240,"size_decoded":2113,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"a05eeeb83edb7fbf649dc35abb55fa5d","sha1":"d2b5f56b72f31509db196c3857a2e7d92ae2505a","sha256":"34bbd55727fece00b1d33f38121b48fcd792914fd8c236d01f1e1262a34c64b8","sha512":"aedad7006ab8eecc9dd2b28647988e0216b28e8b756553d347cc08c3cd964ec3eaa8cdd6bbafd73bd8ce457a811768a3b382268ad83c670b445fa4ed3b518f24","ssdeep":"96:Tr82rL6LE5yKuc670dL6LB6LY6LjL6LRL6LtF/L6L3dL6Lyr6TCZydHRH/gv6La5:TFiLEL67jLoLdL6LgLtFmLcLGZCxfVLg","tlshash":"09b13fb35cf4d82a23a1012befe6b018aa6111d386194c54b5cc40ed8fd5fe5c9dbba4","first_seen":"2026-07-17T15:22:26.636618Z","last_seen":"2026-09-29T05:15:58.722085Z","times_seen":4,"resource_available":true,"data":null}},"time_used":870,"timings":{"blocked":-1,"dns":405,"connect":153,"send":0,"wait":153,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-1daaf918.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.684Z","timestamp":1790658900684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/index-1daaf918.js HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\netag: \"6913e978-308\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":1127,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"fdfe42a3c9ed80c67eda0c2ff497ed9d","sha1":"313023589e60311192ae6307b79ee000d1c7600b","sha256":"1fb6b3bd98845f8b4c5c0f94e6f6e2bd68ded61ebf260333af0bcd0cab94cb91","sha512":"a3c93f62ecf791d991226f0eb4cb3422188d7bad65ffcbac87597b5fa62ed48380f5f3ab924900da62ff27d0a9d6cd7e547907257b3a5282523d8c0ed1946df1","ssdeep":"","tlshash":"a101fdf9fc0d8ebb0ea20a4002a0260014491fddfa1419f198867d6a1be4950d7ce32d","first_seen":"2026-07-17T15:22:26.619736Z","last_seen":"2026-09-29T05:15:58.722882Z","times_seen":4,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/common/getCoinList","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.687Z","timestamp":1790658900687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":657,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":972,"timings":{"blocked":-1,"dns":312,"connect":215,"send":0,"wait":220,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_iota.webp?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.189.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.578Z","timestamp":1790658902578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_iota.webp?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12388\r\ncf-ray: a42881fd5fa223eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1285\r\ncache-control: public,max-age=86400\r\netag: \"6314ddde307b63d87d9386e79a25c440\"\r\nlast-modified: Tue, 03 Mar 2026 01:44:00 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=w6VuVR1DIUjrOo12m4uub2V0XGfssKCUus8lIww73kI-1790658902.6181157-1.0.1.1-xPi6T89QQ7iAUGmF5YpqiEaJSNgr0ZiqRiZWN9ZrAQvtARBd1NWuF_pASNhtvZISvM1ZIaPSNtJhuhavpYsWbuyMkpHwJOmhPX1wtD5PJGohide61Uie_KsOUN4.Hlr4; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"w6VuVR1DIUjrOo12m4uub2V0XGfssKCUus8lIww73kI-1790658902.6181157-1.0.1.1-xPi6T89QQ7iAUGmF5YpqiEaJSNgr0ZiqRiZWN9ZrAQvtARBd1NWuF_pASNhtvZISvM1ZIaPSNtJhuhavpYsWbuyMkpHwJOmhPX1wtD5PJGohide61Uie_KsOUN4.Hlr4","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:45:02Z","raw_expires":"Tue, 29 Sep 2026 05:45:02 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=w6VuVR1DIUjrOo12m4uub2V0XGfssKCUus8lIww73kI-1790658902.6181157-1.0.1.1-xPi6T89QQ7iAUGmF5YpqiEaJSNgr0ZiqRiZWN9ZrAQvtARBd1NWuF_pASNhtvZISvM1ZIaPSNtJhuhavpYsWbuyMkpHwJOmhPX1wtD5PJGohide61Uie_KsOUN4.Hlr4; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12388,"size_decoded":13272,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6314ddde307b63d87d9386e79a25c440","sha1":"773a7debef0c9dbce49006c9218c878eb9294d50","sha256":"56ac72f9a1690a1319fa09aae8ecc28c10e47598b0ee24c82b541a89d1527fda","sha512":"f980fe41afb167824095e0b153781b3e4405777b05cb530f7f4705e3dc31d3605b2640ee7bc9df008a20ff6727218dd40947d87e597e3211c9a5abd07a82afc0","ssdeep":"192:/89NAY5SmzbZ0KPwO2TiFhnfxdFuki9PZs0kvV5uST5EjDzlAVU3IQcSyJAnGpDA:U+mzRP/2TehnbFb1fmjdAijWZG","tlshash":"1842c0718791b5a7bb3c8453a751c85a52872214840bac13f278cfb3a3dbb19ee70ed4","first_seen":"2026-07-17T15:22:26.576588Z","last_seen":"2026-09-29T05:15:58.724339Z","times_seen":13,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":14,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/currencyItem-60d85ee8.css","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.695Z","timestamp":1790658900695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/currencyItem-60d85ee8.css HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-6d6\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":847,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"1089970c70c80c7202c76af80156cac9","sha1":"c85254b66ce1b056fec523057b79da4889c136d9","sha256":"60d85ee8da3a27266c72c465a77ff03384a9776be9ae03b980eb193309676fe9","sha512":"628494baa060e49ba3eaa5dcd330f03d54b6fdd995eb23795ad098b214db3e5c95861487d28dc8333a3c1c01c5200869432354ecf46c4a29cf78adfd6db7868e","ssdeep":"","tlshash":"c2314fe4d3160374d93ac8966ea4018cd0543b829057dac9f48ffe1b5fcb6d31b70969","first_seen":"2025-06-19T02:24:45.85215Z","last_seen":"2026-09-29T05:15:58.725015Z","times_seen":22,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/common/getMt5Amount?coin=xag","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:01.931Z","timestamp":1790658901931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":657,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_avax.webp?i=kds?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.189.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.582Z","timestamp":1790658902582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_avax.webp?i=kds?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8696\r\ncf-ray: a42881fd5f9823eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1285\r\ncache-control: public,max-age=86400\r\netag: \"d4c32cdcbbe93620061421c9dea94fb5\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:07 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=cB2kCc9yrrCbBLlrvp5PyB0ABJs3XBP26anURE7EZIQ-1790658902.6154418-1.0.1.1-gB7nTV2QvnNr5qpkov1aGrbKJwezov5N_yjWj6ezqXtazVs6uw3Z8W7hAeEnAM.O44h1Ht2CaoWf7_mewi.uPzwZ4QbXLb5XlLaS03l9QIOn0mQViHZCemN6iSlykazp; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"cB2kCc9yrrCbBLlrvp5PyB0ABJs3XBP26anURE7EZIQ-1790658902.6154418-1.0.1.1-gB7nTV2QvnNr5qpkov1aGrbKJwezov5N_yjWj6ezqXtazVs6uw3Z8W7hAeEnAM.O44h1Ht2CaoWf7_mewi.uPzwZ4QbXLb5XlLaS03l9QIOn0mQViHZCemN6iSlykazp","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:45:02Z","raw_expires":"Tue, 29 Sep 2026 05:45:02 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=cB2kCc9yrrCbBLlrvp5PyB0ABJs3XBP26anURE7EZIQ-1790658902.6154418-1.0.1.1-gB7nTV2QvnNr5qpkov1aGrbKJwezov5N_yjWj6ezqXtazVs6uw3Z8W7hAeEnAM.O44h1Ht2CaoWf7_mewi.uPzwZ4QbXLb5XlLaS03l9QIOn0mQViHZCemN6iSlykazp; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8696,"size_decoded":9579,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4c32cdcbbe93620061421c9dea94fb5","sha1":"86b7d8bfcadcf29dc15e04ac27c6fde87dff4037","sha256":"d8e22a4ffaddf6d0ac9a800f58e91a0568b42b7b950ed433acab3e6b54d298d1","sha512":"7e689ce4701f9b7934003689d6365157b34be9be1f94d216df6ffe458179c4428740f75fe17d2575acc0d33fd9ffc680924eee33396bbb2141d3ab044221cf3b","ssdeep":"192:e89NAY5SmzbZ0KPwumFLowvjvYXYN6G+jqe7R0q3YShNSGwp:T+mzRPNi7d6lNYwNSGwp","tlshash":"5102bf17c5a6e7b51e48c4a70c40942fc33a9020694fad28534c9c5bb33dfeeddb1899","first_seen":"2025-09-18T10:45:14.114732Z","last_seen":"2026-09-29T05:15:58.726154Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/charting_library/charting_library.min.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:14:59.663Z","timestamp":1790658899663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:14:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794485c-2a6b\"\r\nexpires: Tue, 29 Sep 2026 17:14:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":3537,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-10-04T06:39:22.605211Z","times_seen":7403,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/common/getMt5Amount?coin=xau","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:01.925Z","timestamp":1790658901925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":657,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/resource/fonts/DINOT-Medium.otf","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.197Z","timestamp":1790658902197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btcexjtuas.org/assets/index-8872f3c9.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Mon, 14 Oct 2024 01:55:32 GMT\r\netag: \"670c7a14-11d88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":73383,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-10-04T06:39:22.649819Z","times_seen":7685,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/xrp.jpg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.564Z","timestamp":1790658902564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /xrp.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-15bd\"\r\nexpires: Thu, 29 Oct 2026 05:15:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5565,"size_decoded":5224,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"07fed2e1aa3b93a393947e0d729f9ad3","sha1":"3ed49c3d9f95e23f83b151113406c528dde65198","sha256":"f97920e13f8ab448f03580ea9a2be8f72193340f46d2856e54a41d1bc365fc1e","sha512":"ab09141676ea42fb90d6cbfab99c6ebc4fbcfd0249cf49cec7358f5128c0fd90ad639ce582f6ac972d3a41e9f52e8387f68eeb5571624bb2965ffd090adde669","ssdeep":"96:1dgNMFPM14jKgBaHC05s5j9A422JytLd99q/O+UGmbH/A4ZQKC+UDkR:1dgNCG4mSaHn594jsByOJGSfQKC+Eo","tlshash":"89b15c31fb1862e2dc06073f554baf89274da902ba74e2a19966113bad093846a785cd","first_seen":"2025-06-19T02:24:45.752688Z","last_seen":"2026-09-29T05:15:58.72985Z","times_seen":14,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/platform/dev/config.js?1790658900661","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.663Z","timestamp":1790658900663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /platform/dev/config.js?1790658900661 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\netag: \"6794485c-18a\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":745,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-10-03T21:29:34.439246Z","times_seen":605,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-6cbf2fe5.css","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.690Z","timestamp":1790658900690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/index-6cbf2fe5.css HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-d5a\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3418,"size_decoded":1237,"mime_type":"text/css","magic":"ASCII text, with very long lines (3417)","md5":"7e3bdda6ff525c786c7f7479df10df9b","sha1":"767dda4936bed1528e2abaca478c597a310765d9","sha256":"6cbf2fe53c98c2cccc001cc4610456bf16be3bf7a816a9db2ab78186a6e5c679","sha512":"0bd9568b4bd93c855f6672fe28f915ac1588831e3d5033ea317e08c6449809056202336b8ddd00cb391bd7022e6394e486bd1ba2c9fef78605d4b34aae389754","ssdeep":"","tlshash":"fc61326eff89013a5d37c5dfad0c5e988f002ea2e4469cd2e04397250e8f793273415a","first_seen":"2026-07-17T15:22:26.653857Z","last_seen":"2026-09-29T05:15:58.733719Z","times_seen":4,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/ltc.jpg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.565Z","timestamp":1790658902565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /ltc.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-37bf\"\r\nexpires: Thu, 29 Oct 2026 05:15:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14271,"size_decoded":14036,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"a056a0cd63c814cbcb32fc85f48f5238","sha1":"e404ebe2d6dbbe64df575ab4843a41e6d75f8ec1","sha256":"4f1f0a756c4b59e4eafa13e903068c407f1ee5c70d687ccec84272c38c082332","sha512":"a5f02566253ff7f55a587b3948c3ef2abe5cb5e17e2795b4028aac12b1a135f1f4318252e12285a4f18a76e89c08b168d952cfe8cfe1c329717e0a4c9953128b","ssdeep":"384:WxTWCV3/ju+JH0FvMqLSaXB4iL65Ko76E:WxTWw37FH0ZB4iL6j7j","tlshash":"1852c05cf7af3e22c0c461ff9b799255e768c405f841571acfb05a838a087f538a3696","first_seen":"2025-06-19T02:24:45.80361Z","last_seen":"2026-09-29T05:15:58.736651Z","times_seen":14,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/trx.jpg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.570Z","timestamp":1790658902570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /trx.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-550b\"\r\nexpires: Thu, 29 Oct 2026 05:15:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21771,"size_decoded":21791,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"64532c2e72b02b8b7efff747fe4dd64d","sha1":"6f5452a1a1d5822c0f47992e27cb6b4ff62b5000","sha256":"a4df7e1902478ffb14dd912c822f4205371b3e1e5ab1760614a95f2209e7084a","sha512":"15598146b71d0cb91e7596e9baede08da73af5feae0f594dfbf559048a2e74de2b51cf8a8f5a1397980e6928cd89d7056da176a273dc743234fea0519f6fcae5","ssdeep":"384:qE2ym/SACBh36o5HyoRIe609rzfUgjA+lV55IhTVV8trupKOHbPbXflSZxxDgD:qEJJPNlDztD55WTTYipd7PbXdsi","tlshash":"c6a2d01b1168a3cfc7319d3918ee01ace52ac4d27f1e2bec7490d2a66560794dfb902e","first_seen":"2025-06-19T02:24:45.829943Z","last_seen":"2026-09-29T05:15:58.738263Z","times_seen":14,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.601Z","timestamp":1790658902601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":667,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.602Z","timestamp":1790658902602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":667,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/platform/dev/144.png?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:01.177Z","timestamp":1790658901177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /platform/dev/144.png?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"689ca809-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-10-05T06:20:03.564049Z","times_seen":333495,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/common/getAllSetting","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.671Z","timestamp":1790658900671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":657,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":328,"connect":223,"send":0,"wait":215,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-bc011be9.css","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.686Z","timestamp":1790658900686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\netag: \"6913e978-18d\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":734,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-10-04T06:39:22.607763Z","times_seen":1633,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/resource/svg/light/zu447.svg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.560Z","timestamp":1790658902560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Mon, 14 Oct 2024 01:55:32 GMT\r\netag: \"670c7a14-1a4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420,"size_decoded":692,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-09-29T05:15:58.741094Z","times_seen":569,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/bnb.jpg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.566Z","timestamp":1790658902566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /bnb.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-523b\"\r\nexpires: Thu, 29 Oct 2026 05:15:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21051,"size_decoded":21110,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"d364a4660a2864ab0d03fb9fd9bf8e6a","sha1":"869d24d2055a64546a9df9b4e1ba913e339ed34f","sha256":"49633b06336e809ce467cd9b6f546998acf30e6ed04c3435bf8b75a68c5cc9ef","sha512":"e1a25c1f637215629783030babb5afb1e723a574793b97d4495b61c0e3295901351d26bb9c434491f3809dbf6f29083a239112970ec4ffbfd625e20de6ec72de","ssdeep":"384:qxS1qaGdxfOpEQAWel++bWipVh0UAdHF0Rj40xQQpuKcd9hnv:tAakcEQOQaWipVKdHF0SiQ3hnv","tlshash":"c892e1371231c679c7ef35bdb7370ceade068950f1bdc26aa11125c015aa265f88e8a7","first_seen":"2025-06-19T02:24:45.893066Z","last_seen":"2026-09-29T05:15:58.741802Z","times_seen":13,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp68f42d74bbc14e628c681ebd23a7fd12.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:03.066Z","timestamp":1790658903066,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp68f42d74bbc14e628c681ebd23a7fd12.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 87547\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB4957ACF6C5323851003D\r\nAccept-Ranges: bytes\r\nETag: \"20E0BEE18FF68E334036C14BFB26804A\"\r\nLast-Modified: Sat, 07 Jun 2025 14:33:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15839281543105551514\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: IOC+4Y/2jjNANsFL+yaASg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":87547,"size_decoded":88123,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x672, components 3","md5":"20e0bee18ff68e334036c14bfb26804a","sha1":"ea1cc52dcc8e826ef14b103450ee06694dc248fd","sha256":"ed284cf6278133043dc39ca619b1ba3a162fd1cf2d267cc264a953fccec94245","sha512":"bec600aadad03f7a69778d7522cf561c10f8e56b456c130e0dd6299519dc5411a60849a00cfecc093bdb496eeff337fb8b78dafd03574975ca1f639e284473b0","ssdeep":"1536:jnbvv5xy0HJXo5bDD3IFVUEFUhFNlV8MwebTuWAGuucZUXAGSyXeuxLu:/r5Jo13IF6E2hHl6MHHKucZYAGSZuxLu","tlshash":"e18312b6930812dfc911573082685839783cd0314716e6a3ffa7357939dbe95ba241df","first_seen":"2026-07-17T15:22:26.61609Z","last_seen":"2026-09-29T05:15:58.742763Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1190,"timings":{"blocked":619,"dns":0,"connect":0,"send":0,"wait":287,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/common/getMt5Amount?coin=xpd","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:01.932Z","timestamp":1790658901932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":657,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/common/getMt5Amount?coin=xap","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:01.933Z","timestamp":1790658901933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xap HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":657,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/common/getAllSetting","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.546Z","timestamp":1790658902546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12327,"size_decoded":4344,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11912), with no line terminators","md5":"0cdc421203455aa59d1c2c738cd35937","sha1":"fb84100bff5cf1aaefe0cb177b498b10aed1dfbc","sha256":"c30dfa916cdbce4a897f03454032b0e6f64e282aad488324417bb4374b2bc83e","sha512":"291b9a2732726e9ec9064fe2148dde6b5ac96ab0fb4235c95ac8c1f609ca4884f40e399724ac37fd8e60e4eca2e1be746a6ee95a62ef02684dd7530c0ca16f6c","ssdeep":"192:LQHbDDOSpQ+sQD+Rb1M2hOyBvxEFGxpN3AHJytaQzT65Nhtt2swYk1MNFyyhk9TD:9MQLLbT6J2RMnU2NG","tlshash":"7842766b32dcccbdd2d60dc5d0ab3a96759c34abab40985598e6bfdc889ddb3440b00d","first_seen":"2026-09-29T05:15:58.744798Z","last_seen":"2026-09-29T05:15:58.744798Z","times_seen":1,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/resource/svg/light/mengbanzu12.svg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.556Z","timestamp":1790658902556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\netag: \"6794485c-322\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802,"size_decoded":1074,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-10-04T06:39:22.651479Z","times_seen":1120,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/btc.jpg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.561Z","timestamp":1790658902561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /btc.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-4907\"\r\nexpires: Thu, 29 Oct 2026 05:15:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18695,"size_decoded":18721,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e0bd679cd8e0e47b99f9a57e1630eab9","sha1":"84f1e2c0677e05aaf4eeca35b082d45b918cd173","sha256":"6e66685f018712ad59cd51776efe995ce8e2de1e54b5284b64a7c5ccae9619f2","sha512":"8762c700d86a07d203379f83ee795016a83f22a858026e42ae5af47d87bad7f023196abf5b2c57282a461b5158a8081a189765580d29561ab34b58a936941aa9","ssdeep":"384:oa8lUgPlQEKkx9BM6eHr0JaxCHsC/jWdEti7b8Jmn3qCmPBvEip24:ozlZ9NKW9BMv+/jWdEts8Kmzh","tlshash":"9782d0f3f91a61bfd87a03b94582bc26229b79e22b989d4d248015c84de88cc51d3d5d","first_seen":"2025-06-19T02:24:45.865315Z","last_seen":"2026-09-29T05:15:58.747362Z","times_seen":14,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_atom.webp?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.189.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.580Z","timestamp":1790658902580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_atom.webp?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9980\r\ncf-ray: a42881fd5f9323eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1285\r\ncache-control: public,max-age=86400\r\netag: \"f4d34faf5f6630f083bd36debe47511c\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:06 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=PY16aJxkdDdYTUCVMi7kmGvSUD2UxsX5zGalaWNUxLk-1790658902.6149836-1.0.1.1-oecRaaMySwR06Nw0.uJVZDiK7AwsDUArs58iGKH7Ju85_PQEJIKOD9jUlThw8JZ1VqZlngoqb8eSA1TJYpeCE1XXCSPHZ_xMPd0Y3zgYiB6BuAncHCXmdo4zaIDk32vC; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"PY16aJxkdDdYTUCVMi7kmGvSUD2UxsX5zGalaWNUxLk-1790658902.6149836-1.0.1.1-oecRaaMySwR06Nw0.uJVZDiK7AwsDUArs58iGKH7Ju85_PQEJIKOD9jUlThw8JZ1VqZlngoqb8eSA1TJYpeCE1XXCSPHZ_xMPd0Y3zgYiB6BuAncHCXmdo4zaIDk32vC","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:45:02Z","raw_expires":"Tue, 29 Sep 2026 05:45:02 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PY16aJxkdDdYTUCVMi7kmGvSUD2UxsX5zGalaWNUxLk-1790658902.6149836-1.0.1.1-oecRaaMySwR06Nw0.uJVZDiK7AwsDUArs58iGKH7Ju85_PQEJIKOD9jUlThw8JZ1VqZlngoqb8eSA1TJYpeCE1XXCSPHZ_xMPd0Y3zgYiB6BuAncHCXmdo4zaIDk32vC; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9980,"size_decoded":10863,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4d34faf5f6630f083bd36debe47511c","sha1":"6cf79264ea55ac6fe91c0dcbed2f75022ec617a4","sha256":"b78b80977f1ef44225acf5970c668ded7d8520256fe79d7031438c496e7fef7c","sha512":"05fe5f22535dc794f24d420a82f2047fbbafbaee01d28b323f86e23473fd3779ea57ebbccb317a010a1a193726371307da90f28cdaf22371be951df2371885e0","ssdeep":"192:CJ0Xcmq1Y7qmpcWZ5o7TdWx8Q0z1YD7fs9eb+U7eMKdq5Ohb2cefEbIknT:G0Xhqu7qmp3GTdkD0z3UaMT5O5QOTnT","tlshash":"9122bf2de2c234009cd24c464ce5f45f6955c5c6a12288f7bec1c78285b90dbef4aaea","first_seen":"2025-11-22T22:43:38.945794Z","last_seen":"2026-09-29T05:15:58.747969Z","times_seen":38,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_1inch.webp?i=kds?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.189.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.581Z","timestamp":1790658902581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_1inch.webp?i=kds?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14426\r\ncf-ray: a42881fd5f9623eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1285\r\ncache-control: public,max-age=86400\r\netag: \"f8c1b5b96416c75f9d292d7825c2c001\"\r\nlast-modified: Tue, 03 Mar 2026 01:41:46 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=GwCPRQK1Y.AS0nMf7VHdaotBYPC7NTLPqhPGTYfDmmM-1790658902.6152148-1.0.1.1-8Ur0.UjCuS8Ke7u6Zk04BdzOMPZUOWHVys8.ewatTattqR7hSH727ejXrjbdWUl1lUvOaxYpXlS8U4_CGZfek38Rn_O9TsLJgJEjW5ihGC8AcdcTF6KBLZ5fsJML3Nih; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"GwCPRQK1Y.AS0nMf7VHdaotBYPC7NTLPqhPGTYfDmmM-1790658902.6152148-1.0.1.1-8Ur0.UjCuS8Ke7u6Zk04BdzOMPZUOWHVys8.ewatTattqR7hSH727ejXrjbdWUl1lUvOaxYpXlS8U4_CGZfek38Rn_O9TsLJgJEjW5ihGC8AcdcTF6KBLZ5fsJML3Nih","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:45:02Z","raw_expires":"Tue, 29 Sep 2026 05:45:02 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=GwCPRQK1Y.AS0nMf7VHdaotBYPC7NTLPqhPGTYfDmmM-1790658902.6152148-1.0.1.1-8Ur0.UjCuS8Ke7u6Zk04BdzOMPZUOWHVys8.ewatTattqR7hSH727ejXrjbdWUl1lUvOaxYpXlS8U4_CGZfek38Rn_O9TsLJgJEjW5ihGC8AcdcTF6KBLZ5fsJML3Nih; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14426,"size_decoded":15310,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8c1b5b96416c75f9d292d7825c2c001","sha1":"1f53eb11053de7d0e6c7270028241466918032ae","sha256":"4df281b673997b2445044157226b8e31926a8a3d660975c47dcd3c716f2965e4","sha512":"936aac244952662383b5206f4d95ea2dc2eed7f47f0eb95b542dd3f44e5d84e02c105af75f6964e67f7bc460ac8adf164f7df620086b0380ad9e3d8ecc204c80","ssdeep":"192:589NAY5SmzbZ0KPwtSK9wAx9K03jSuZCyJ2Sz9oDmwXhVNKyuetFHrET1XLxGaD2:6+mzRPtAH3bZCyJ2KmDvfgZetVQF1D2","tlshash":"f152c018c1eb63b627700c73a740e27f89487111b18abc2d6b0feb976345d4d5f265a1","first_seen":"2026-07-17T15:22:26.64043Z","last_seen":"2026-09-29T05:15:58.748977Z","times_seen":13,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp2003369b08864f67a7bdbc3bd4f5e2d6.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.586Z","timestamp":1790658902586,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp2003369b08864f67a7bdbc3bd4f5e2d6.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 158333\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB49577CD23C33353B277E\r\nAccept-Ranges: bytes\r\nETag: \"BCF7364A8C40D33BDF433C04B622ED15\"\r\nLast-Modified: Tue, 08 Apr 2025 17:14:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11597926574612920846\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vPc2SoxA0zvfQzwEtiLtFQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":158333,"size_decoded":158910,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"bcf7364a8c40d33bdf433c04b622ed15","sha1":"0707d502e220ef4bae31d2f47a49cd7ab01b7ec8","sha256":"bca853b8b0cfaea97eb2ae60c122d04c7f294731b070d2ae7c8f6e88484cd3da","sha512":"d2012cae485fd4410b8c0ffe90a28a6ae00746acee0b2a4c7d15d060ce765817366c60e9c2711a514558cdc2a82f52e7c540a70dfe097cd0ee9c6229b99806f8","ssdeep":"3072:NbIOHcmiNEnjlOqcAVwF1yFktsnq/HniEj2foXt1q5VABND2cp0cQnU:xIOYqjlOqca2yMQqfzUVAnZQU","tlshash":"80f3122ea2f21941d64296b765617d630daee8072f41e12b68d03996c3323fc5f722d7","first_seen":"2024-08-29T18:12:05.897064Z","last_seen":"2026-09-29T05:15:58.750824Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1721,"timings":{"blocked":-1,"dns":1,"connect":283,"send":0,"wait":290,"receive":580,"ssl":566},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-4971824c.js","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.676Z","timestamp":1790658900676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/index-4971824c.js HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-36c1\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14017,"size_decoded":4293,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14016)","md5":"ad315b75c8a2aa3f4b3928df97c62c88","sha1":"ef19e2aa55145ff1fb97bbba119b4e96e225c60b","sha256":"b2e02af084b0c2166ff77eb7f365eb3d3c76602c5866be4cb772b0d9d46543ba","sha512":"457600cd2741d3b0fd0c928d7be2d7cddfcba4eb37f7e70e54ee211c25ddeda0246cb4968912f87d965082484dd77655621b0858b7c2bcc17d6797cf9090927c","ssdeep":"384:PVmTu8DiFFPFgSmfUxUDgx/lH1ZuJh/gw2Gm43HC5fBWKSF:tF37gSmfUN4oGm43HC5fBWKi","tlshash":"f452c596f9069a3cf5fba85140880010762e7fdf500d89e2b8bd6d866752efcbb4971c","first_seen":"2026-07-17T15:22:26.650145Z","last_seen":"2026-09-29T05:15:58.751646Z","times_seen":4,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_phb.webp?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.189.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.572Z","timestamp":1790658902572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_phb.webp?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10700\r\ncf-ray: a42881fd5f9923eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1285\r\ncache-control: public,max-age=86400\r\netag: \"3f8a2d39781ba0ceb35f8158e38e8f24\"\r\nlast-modified: Tue, 03 Mar 2026 01:45:12 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=XUMPPeuhfZcFenVYg5eRHa9gLBYdbZA4Tlu6mX6D90Q-1790658902.6159194-1.0.1.1-EoG072NtIlQ8LM2KxbcnQ7k38TvMUrqPNyuql1b.uTYrxWWyS9F96rE576UW7YUJs_FBxozEACRhe8_YKX4wYtRPVaqEfgENWFwqYaaPMRxTDUBvbpo30Ji1WF9bXAJD; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"XUMPPeuhfZcFenVYg5eRHa9gLBYdbZA4Tlu6mX6D90Q-1790658902.6159194-1.0.1.1-EoG072NtIlQ8LM2KxbcnQ7k38TvMUrqPNyuql1b.uTYrxWWyS9F96rE576UW7YUJs_FBxozEACRhe8_YKX4wYtRPVaqEfgENWFwqYaaPMRxTDUBvbpo30Ji1WF9bXAJD","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:45:02Z","raw_expires":"Tue, 29 Sep 2026 05:45:02 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=XUMPPeuhfZcFenVYg5eRHa9gLBYdbZA4Tlu6mX6D90Q-1790658902.6159194-1.0.1.1-EoG072NtIlQ8LM2KxbcnQ7k38TvMUrqPNyuql1b.uTYrxWWyS9F96rE576UW7YUJs_FBxozEACRhe8_YKX4wYtRPVaqEfgENWFwqYaaPMRxTDUBvbpo30Ji1WF9bXAJD; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10700,"size_decoded":11584,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3f8a2d39781ba0ceb35f8158e38e8f24","sha1":"3abbe00f952c3547618186c24244652d4eaaedd8","sha256":"579729fead460dc03adc9ed58370eb1be5b2b6b151ef639bd61e45265e01f650","sha512":"b1c881d0a5aff5668b8c331aeaaea0fba8ed19fd1132c03e9ca9e40b835a89868013d21a6f585c21b740cdfc2747d0622190e08c533d825a919f35fd309e6ded","ssdeep":"192:C89NAY5SmzbZ0KPwMCK+Zv3SfSHjtqK0pVyVKqXNkOuGeCvcGjYft81R:X+mzRPlLq/8MjtWqVKq7lEBfa1R","tlshash":"c122b0248bc11c7b3bfde65a5541c05b60af82a9a114ce6612c9d077773ac4e0fdd4f0","first_seen":"2026-07-17T15:22:26.637891Z","last_seen":"2026-09-29T05:15:58.752629Z","times_seen":13,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":26,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/common/type/defi_activity_type","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.604Z","timestamp":1790658902604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":667,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-5afbfee3.css","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.696Z","timestamp":1790658900696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/index-5afbfee3.css HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-26ea\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9962,"size_decoded":2404,"mime_type":"text/css","magic":"ASCII text, with very long lines (9961)","md5":"3a1f247689da690819eb1b4166265511","sha1":"9214426d256492b8e3de6418dc0ca92081370271","sha256":"5afbfee35fc79b88076baef91f58bc56af0093e124ff8f0532182df3e9c31795","sha512":"3f3b464ffa1553b3dbe3b796474e13225bcfdf9f115b72803f559d267fb34778225a89d6ad2ef400727bad6e3cd74f82ab89f1bdc29eb2728ee80ac48c1196c0","ssdeep":"96:IyUGwezOETj+jXMp5mXUVM2tL0a5ORI8m62rrRTHo4LT3WLERvQ/cgci:IswePf+EYv3Gxo6T3WLERv+","tlshash":"8722532df6ec3739ac37e159afd849cce219b911e6939da1e967c62309cb1e31730448","first_seen":"2026-07-17T15:22:26.664202Z","last_seen":"2026-09-29T05:15:58.75503Z","times_seen":4,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_ldo.webp?i=kds?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.189.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.574Z","timestamp":1790658902574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 09:33:13 GMT","end":"Fri, 25 Dec 2026 10:33:08 GMT"},"fingerprint":{"sha1":"AD:61:CF:88:A4:26:32:0B:B1:74:4E:AB:C6:84:31:63:38:1B:08:ED","sha256":"0F:70:F7:FC:F2:8C:BC:C3:80:70:98:9F:12:FD:E7:D8:41:9D:DC:9F:FC:0C:A4:F9:93:A9:94:64:59:02:0E:C4"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_ldo.webp?i=kds?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8332\r\ncf-ray: a42881fd5f9b23eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1285\r\ncache-control: public,max-age=86400\r\netag: \"73171e791c3e48300238d6efe18c9104\"\r\nlast-modified: Tue, 03 Mar 2026 01:44:16 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=uU1U6z9dl1AkI.BxUXln4hfZCAGG5CT.Md0IY.vCbXI-1790658902.6160727-1.0.1.1-bAqiHBrCtjrHuTmG8VbMwHZ5.IjVH6Z2BUecu7smuQnkQRSpvfoYwexrX29lMGu7tsuh3KAx044hKjpflaSMgsxjGr2WMyrBsRr5wC9R5ZO9NX2EYiAN9EXdjSmZDCpJ; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"uU1U6z9dl1AkI.BxUXln4hfZCAGG5CT.Md0IY.vCbXI-1790658902.6160727-1.0.1.1-bAqiHBrCtjrHuTmG8VbMwHZ5.IjVH6Z2BUecu7smuQnkQRSpvfoYwexrX29lMGu7tsuh3KAx044hKjpflaSMgsxjGr2WMyrBsRr5wC9R5ZO9NX2EYiAN9EXdjSmZDCpJ","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-29T05:45:02Z","raw_expires":"Tue, 29 Sep 2026 05:45:02 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=uU1U6z9dl1AkI.BxUXln4hfZCAGG5CT.Md0IY.vCbXI-1790658902.6160727-1.0.1.1-bAqiHBrCtjrHuTmG8VbMwHZ5.IjVH6Z2BUecu7smuQnkQRSpvfoYwexrX29lMGu7tsuh3KAx044hKjpflaSMgsxjGr2WMyrBsRr5wC9R5ZO9NX2EYiAN9EXdjSmZDCpJ; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Tue, 29 Sep 2026 05:45:02 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8332,"size_decoded":9215,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73171e791c3e48300238d6efe18c9104","sha1":"8761c1fcbeffd440ad46ff524e4d0009e4042391","sha256":"3c33302b05e46c79afddd51f5add6751ca30b72993c2b960446cd8476324884e","sha512":"1d0a935384c8728b8f6d84e62f8d8685522eb00aeb73a7d57be9e07a528fa5c07dfe99f2abfb7cd0ec485e11e188768f2581d82796d918b572e9def63da412f3","ssdeep":"192:n89NAY5SmzbZ0KPwnsBLiykAc2/9b8gfFw6Z0JLhbe9lCuIIU:s+mzRPnbdc48gfFw6ZyR6CuIIU","tlshash":"2d029f1dc3604ef27ab94852b5088477523d90105577da3a91adfa5b7c2fc0a6c7a7f0","first_seen":"2026-07-17T15:22:26.63917Z","last_seen":"2026-09-29T05:15:58.755647Z","times_seen":13,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":13,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpc3a2e089d4db4d378197c5466d8d7bcf.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.589Z","timestamp":1790658902589,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpc3a2e089d4db4d378197c5466d8d7bcf.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 255863\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB4958E6135839374251C3\r\nAccept-Ranges: bytes\r\nETag: \"8E2D0D68EF7B3099A4FB1061C0847946\"\r\nLast-Modified: Tue, 08 Apr 2025 17:15:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9272553010199676724\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ji0NaO97MJmk+xBhwIR5Rg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":255863,"size_decoded":256439,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"8e2d0d68ef7b3099a4fb1061c0847946","sha1":"34771929afc985fe955dd91402ca7a8ad95fbb9e","sha256":"bcbbd14dc00035f42df40f6a691ca1175d915f10bc9ca034c90e55d5ed666325","sha512":"52beddfce84fb8188e0a2e2d8e7d1c51f1b7611f1202105719307cc42af6678f1b2f41602f628d4f7bfa9cb99dbe1864638fe8538ca55d9384c55c6e61b023ea","ssdeep":"6144:NmiyznjkBNvPf7btuII7tmFgGexE/IDEl5/WuOy:NmiykBRluv7ISTEl5/Oy","tlshash":"294423d8b87278b2cbef0db49c59f15a3977606ca1bbbcb3395ca1da54324646c041ca","first_seen":"2024-08-29T18:12:05.902596Z","last_seen":"2026-09-29T05:15:58.756451Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2268,"timings":{"blocked":1656,"dns":0,"connect":0,"send":0,"wait":285,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp15ee59b05cb14108be51f835493c2c0e.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.599Z","timestamp":1790658902599,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp15ee59b05cb14108be51f835493c2c0e.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 126395\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB4957AFAD5B39393B2569\r\nAccept-Ranges: bytes\r\nETag: \"5021CD447181A2BE27D8B8A3CB9F7D1E\"\r\nLast-Modified: Tue, 08 Apr 2025 17:31:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5244213128299386486\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: UCHNRHGBor4n2Lijy599Hg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":126395,"size_decoded":126971,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"5021cd447181a2be27d8b8a3cb9f7d1e","sha1":"01db3e026290149b3915861cc952eb8915a79eb4","sha256":"ce03288d7b5b2b5d23b4f17af76cb32d388cf921994dc73b4e32238d92aa5661","sha512":"98a159f1a672c22949f4e3b9adfaa4c1e7f48332100a2b4b47c42e323930cddbe1121b7bb6a506f4fe0b47fa66902344e44751fac1501ce77cf3dac4ff949a1d","ssdeep":"3072:mSs4NUd6Tvdf7hl8rzU6CveFFT/W8F7/GnKrtHvrLS:6OTvdrYU6CvQF7W8FLXRPy","tlshash":"e7c31273d55abc9be35c8b39e0e7842a387631092a4a757d8526cd3b104863b0fa1ed7","first_seen":"2024-08-29T18:12:05.898154Z","last_seen":"2026-09-29T05:15:58.757713Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1767,"timings":{"blocked":1127,"dns":0,"connect":0,"send":0,"wait":303,"receive":337,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/common/getAllSetting","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.603Z","timestamp":1790658902603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":667,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.org/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.545Z","timestamp":1790658902545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://btcexjtuas.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.org\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":499,"size_decoded":935,"mime_type":"application/json","magic":"JSON text data","md5":"67a5e1e103eee2bec10f31c8d31a57ca","sha1":"faa3e4835c584aad6a2575e30b718e39892571d2","sha256":"f8cecea5f4d818e1bb07f35283ef06900028d774587ccc5533f24380b0651c6d","sha512":"e72874d93342f15f793f0cbc76a79d38f970922a6a6a59b0968dd6052987574dde5014f9003b254cb937abde730be3dbe5c5fbb33e7699b4a54d805fbc603af8","ssdeep":"","tlshash":"e1f0270e153cce76480644c725ccbdcd927e1653d6a0cd34865bcf5d82f56b60b2ba09","first_seen":"2026-07-17T15:25:04.43473Z","last_seen":"2026-09-29T05:15:58.758539Z","times_seen":2,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"webapi.btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/sol.jpg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.567Z","timestamp":1790658902567,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /sol.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-250a\"\r\nexpires: Thu, 29 Oct 2026 05:15:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9482,"size_decoded":9082,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"71a6dc304437a39b5379d9788799425d","sha1":"b56fa05ea6bebf2e2a975904d2353f47b02bae07","sha256":"7154615d3429ac6e3ccc6dfe1388495d0d294e7788684dfeb99db6392dc67f4d","sha512":"9de379ac28b41b3799b2ac9590565859e87f6007a81b4477faa7edda2db524db855f2fd60d0237ef12f1c0ce3d3599d108a34a7de27cec7f19cd3e0738c99032","ssdeep":"192:TKrB7smug7UDrMcekppVYj61nFEW7De7Vmvrk1nDg0D0vjXZ:T8F4pMj67EmOOrk7cZ","tlshash":"1a12afd43f5acf2bed7221755ccc54dd1a238e6cd3696677c74054e013272e4ad18d46","first_seen":"2025-06-19T02:24:45.840742Z","last_seen":"2026-09-29T05:15:58.760994Z","times_seen":14,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.btcexjtuas.org/ws/b51ab128-6cd9-415c-b545-94a29fa6bb80","fqdn":"webapi.btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"202.162.99.5","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.914Z","timestamp":1790658900914,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.btcexjtuas.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:02 GMT","end":"Tue, 24 Nov 2026 03:51:01 GMT"},"fingerprint":{"sha1":"0A:F5:12:7F:E2:6D:5F:56:CE:68:D7:C2:FC:F3:46:FB:FA:5C:6F:8F","sha256":"A9:E2:2D:01:2F:08:6C:B4:5D:9C:95:A9:0C:0B:7A:7D:40:06:11:A1:B4:48:75:CF:C6:3E:0D:14:6C:79:13:FC"}}},"request":{"raw":"GET /ws/b51ab128-6cd9-415c-b545-94a29fa6bb80 HTTP/1.1\r\nHost: webapi.btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://btcexjtuas.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Sm5SpBnjwvXA1t3uTI7z9w==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Tue, 29 Sep 2026 05:15:02 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btcexjtuas.org\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: MX2bVBr2PqPPl0z6o/EIj/wjXYk=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":444,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T07:32:28.269352Z","times_seen":18852285,"resource_available":true,"data":null}},"time_used":2101,"timings":{"blocked":0,"dns":758,"connect":892,"send":0,"wait":224,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/index-d253bac1.css","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:00.679Z","timestamp":1790658900679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\netag: \"6913e978-3d\"\r\nexpires: Tue, 29 Sep 2026 17:15:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":396,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-10-04T06:39:22.648094Z","times_seen":511,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp35c6b88242674795a227fc0ea3111981.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.534Z","timestamp":1790658902534,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp35c6b88242674795a227fc0ea3111981.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1562\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB4957AFAD5B3939A12469\r\nAccept-Ranges: bytes\r\nETag: \"569A0DBD2FFA9B38F25CCBC8E6697778\"\r\nLast-Modified: Tue, 08 Apr 2025 17:35:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2778767496489567871\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: VpoNvS/6mzjyXMvI5ml3eA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1562,"size_decoded":2136,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 64x64, components 3","md5":"569a0dbd2ffa9b38f25ccbc8e6697778","sha1":"2b30ef6f52c6deb1da0ebdbb8bb0b068ace65d1a","sha256":"568a577fe1290cc61e1f99c712ae3ebbd973763c88961ebcadb4b41b1ead509a","sha512":"5ddcab2093fef6504c0777315e6f5a91fd5abbfe4de70773d355510fdaebb44a491e75cf576dd163742b516fd44392c0b2c60928406b782ea863ffc9f55133f0","ssdeep":"","tlshash":"9a314c439522b57dcd1304b5a8fe2a72cb037c0237f92c4f56c3a318d24b301284408c","first_seen":"2024-08-29T18:12:05.875464Z","last_seen":"2026-09-29T05:15:58.763031Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1210,"timings":{"blocked":-1,"dns":23,"connect":297,"send":0,"wait":297,"receive":0,"ssl":592},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/dot.jpg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.585Z","timestamp":1790658902585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /dot.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-54ad\"\r\nexpires: Thu, 29 Oct 2026 05:15:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21677,"size_decoded":21792,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"3b09a25b3fe666c3bc2f63ec473597ea","sha1":"911f930787292f79573f49ae8e3b630582f03de8","sha256":"8de2938e4942481b72684f884744ee867dee9bd2fb5f5373663f8119aea546a0","sha512":"907b038619bb5aecc6f224b654b907145d62fb7f44b5a0b1dde5475748ac161484a321a73116ea6c7a48e8d344d4e38c5d845091a8b465d3ea970e497d7c8722","ssdeep":"384:9KyXEjihHrhAxfQGner0up1+fWaPK2DOEIcgoM3NnXD5fw2l7Y:9Kz/iGbuP+s2DoctMVJ72","tlshash":"e1a2d045b6bc871bc56a52341327ce5836e695402f868390a70e866c2c1cf9abdf46e5","first_seen":"2026-07-17T15:22:26.612863Z","last_seen":"2026-09-29T05:15:58.763858Z","times_seen":13,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/assets/vendor-80659152.css","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:14:59.676Z","timestamp":1790658899676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /assets/vendor-80659152.css HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:14:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-16c35\"\r\nexpires: Tue, 29 Sep 2026 17:14:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93237,"size_decoded":38095,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"4fe26c57d03cf57ee1611092bcb66c80","sha1":"468368a6ad61c94ca07df85661b7adcfa957971b","sha256":"80659152d90088c76cb8ac878756fef53a65da97906b8c2689196648314f4b9f","sha512":"da41a618b1068a7449d768abafbab2512c3675977aa9da9bb5fb1e2829864a31222068a5119a779b3b8c6f4ccbc2b0c548480d9f961d86fe80cc4f1f8a9d2f5e","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"8693d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-09-18T10:45:14.112232Z","last_seen":"2026-09-29T05:15:58.764718Z","times_seen":7,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp72fe870f6d404fffb20fa1662b9f5e94.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.532Z","timestamp":1790658902532,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp72fe870f6d404fffb20fa1662b9f5e94.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3770\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB4957ACF6C5323896FF3C\r\nAccept-Ranges: bytes\r\nETag: \"AC57F69A059B27E9B7E2D71F7B556AF6\"\r\nLast-Modified: Tue, 08 Apr 2025 17:33:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14146020860961096738\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: rFf2mgWbJ+m34tcfe1Vq9g==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3770,"size_decoded":4345,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"ac57f69a059b27e9b7e2d71f7b556af6","sha1":"1af6532d57f9c61f890786bf897ec556ed11a9d0","sha256":"8cb942606d3bbf90682e4e49d691e1b5e761309e17d2b4451f34c10071a41d9f","sha512":"05566aebfddbc7a582225c09246c248c8f1c810b9aa1f40d3bb3fb17afd1d45e55f79e43e40a6ed2dd9c2d0dfbb76ccd8d876e74e16f576be438878326d22896","ssdeep":"","tlshash":"3d715c76d6f5786d9e5d516e12f0771be09eb11831d42341a71b5081382bfa43bb8e07","first_seen":"2024-08-29T18:12:05.864836Z","last_seen":"2026-09-29T05:15:58.768964Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1137,"timings":{"blocked":-1,"dns":25,"connect":278,"send":0,"wait":278,"receive":0,"ssl":554},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpf9890e666df54565ae682be531012c08.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.555Z","timestamp":1790658902555,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpf9890e666df54565ae682be531012c08.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2467\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB4957E613583937B24EC3\r\nAccept-Ranges: bytes\r\nETag: \"E7769DC09F94AE578022F8221612BC48\"\r\nLast-Modified: Tue, 08 Apr 2025 17:43:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3717875445481473298\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 53adwJ+UrleAIvgiFhK8SA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2467,"size_decoded":3041,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e7769dc09f94ae578022f8221612bc48","sha1":"90f514b55b228f1a2e75b41fddf743ebb3c7d012","sha256":"1ff7c9a67232412db2343237ed0d10b4a91be674bc12d313271f8a0561310f82","sha512":"25e8eeb9005e5c5309f745d718167f29442c8ada411abbb45648d18a2e1d656a15e39739ca2f0702dc29e47e7cb342c29ec34d70c0224cbdfe7b01e8139e4110","ssdeep":"","tlshash":"6b513d4a82555123fbd8c77482cca9c804b503b954a92c942c369e86ee4ec75a75d19c","first_seen":"2024-08-29T18:12:05.880996Z","last_seen":"2026-09-29T05:15:58.770013Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1100,"timings":{"blocked":-1,"dns":2,"connect":277,"send":0,"wait":274,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.org/resource/svg/light/zu29.svg?2.0.1762865831437","fqdn":"btcexjtuas.org","domain":"btcexjtuas.org","tld":"org"},"ip":{"addr":"206.119.72.94","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.559Z","timestamp":1790658902559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 03:51:21 GMT","end":"Tue, 24 Nov 2026 03:51:20 GMT"},"fingerprint":{"sha1":"93:23:A2:4B:4B:CC:27:7F:FA:4B:8D:1B:DC:78:90:53:41:91:6B:91","sha256":"C6:E1:34:F2:FE:D8:23:98:A2:8F:B8:6F:A7:D3:20:F7:1B:8A:93:E6:04:D3:F0:39:F5:BD:BF:1D:09:AE:9F:E0"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:15:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\netag: \"6794485c-348\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":1112,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-10-04T06:39:22.646459Z","times_seen":1052,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"btcexjtuas.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp65ce0857b9d24255a52a845abbb5ecb5.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.588Z","timestamp":1790658902588,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp65ce0857b9d24255a52a845abbb5ecb5.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 158333\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB4958ACF6C532386C013D\r\nAccept-Ranges: bytes\r\nETag: \"BCF7364A8C40D33BDF433C04B622ED15\"\r\nLast-Modified: Tue, 08 Apr 2025 17:14:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11597926574612920846\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vPc2SoxA0zvfQzwEtiLtFQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":158333,"size_decoded":158910,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"bcf7364a8c40d33bdf433c04b622ed15","sha1":"0707d502e220ef4bae31d2f47a49cd7ab01b7ec8","sha256":"bca853b8b0cfaea97eb2ae60c122d04c7f294731b070d2ae7c8f6e88484cd3da","sha512":"d2012cae485fd4410b8c0ffe90a28a6ae00746acee0b2a4c7d15d060ce765817366c60e9c2711a514558cdc2a82f52e7c540a70dfe097cd0ee9c6229b99806f8","ssdeep":"3072:NbIOHcmiNEnjlOqcAVwF1yFktsnq/HniEj2foXt1q5VABND2cp0cQnU:xIOYqjlOqca2yMQqfzUVAnZQU","tlshash":"80f3122ea2f21941d64296b765617d630daee8072f41e12b68d03996c3323fc5f722d7","first_seen":"2024-08-29T18:12:05.897064Z","last_seen":"2026-09-29T05:15:58.750824Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2219,"timings":{"blocked":1641,"dns":0,"connect":0,"send":0,"wait":289,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpd2e4066eef574b0a808bd88c78f39a3b.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.org/","date":"2026-09-29T05:15:02.590Z","timestamp":1790658902590,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpd2e4066eef574b0a808bd88c78f39a3b.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 29 Sep 2026 05:15:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 126750\r\nConnection: keep-alive\r\nx-oss-request-id: 6ABB495768F5793238C951E6\r\nAccept-Ranges: bytes\r\nETag: \"9D3DD62CB672561DCCCF81ED5C49A731\"\r\nLast-Modified: Tue, 08 Apr 2025 17:29:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14280964938837360927\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nT3WLLZyVh3Mz4HtXEmnMQ==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":126750,"size_decoded":127327,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"9d3dd62cb672561dcccf81ed5c49a731","sha1":"5b9e5f09bf26ad485f0d5fb9e28eb174f065b744","sha256":"028e9028374f9ec529f0c565b90beb9cbfbf23eeb49c54f24c44e8f619fb2fa7","sha512":"6f2b36df6646a0f22dcb9e1cad3722cac29ae11a2af88d433c62d7f3b6d703a4a3f5aab65d6b777e4c80d9f96dcf09b28e8816249307c0c85a9673dd843f15c6","ssdeep":"1536:6VUlFXPlozlYC/nq4eJa+ZhiY07BFxyNrPhsWmTd8l9Pa8MVU33yCX7b/ZKzRvyS:jlFfIlYCWd3pSBHEiE2VA/hKzQMCS","tlshash":"95c312d38b6609acc01d1a3c8a63b3b769139218049d53a7dfb78492fb05b8d3c7259e","first_seen":"2024-08-29T18:12:05.893037Z","last_seen":"2026-09-29T05:15:58.77208Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1668,"timings":{"blocked":1073,"dns":0,"connect":0,"send":0,"wait":285,"receive":310,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}