{"report_id":"331aac9c-3b1c-473c-a466-7120caddbb85","version":6,"status":"done","tags":[],"date":"2025-09-28T21:49:10Z","url":{"schema":"https","addr":"direxbit.com/","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"direxbit.com/","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"title":"Buy \u0026 Sell Bitcoin, Ethereum | Cryptocurrency Exchange | DirexBit"},"submit":{"url":{"schema":"https","addr":"direxbit.com/","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-02T21:49:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.binance.com","ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2025-09-22T01:44:17.019575Z","alert_count":0,"request_count":13,"received_data":61712,"sent_data":6140,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":3,"received_data":122889,"sent_data":1641,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-09-21T22:11:36.895165Z","alert_count":0,"request_count":1,"received_data":88169,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-21T22:12:58.000435Z","alert_count":0,"request_count":2,"received_data":654195,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-21T22:12:58.070161Z","alert_count":0,"request_count":1,"received_data":209445,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":1,"received_data":34196,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"direxbit.com","ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-27","domain_rank":0,"first_seen":"2025-09-28T21:49:12.652372Z","last_seen":"2025-09-28T21:49:12.652372Z","alert_count":273,"request_count":275,"received_data":4440158,"sent_data":143907,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-13T23:29:10.828902Z","times_seen":178680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe8462dc5678e9f3091b64ec50361a58","sha1":"506e741fb2c2e2dc13ce89456af416e3b78c5823","sha256":"a2a2a71a1bfc6599fe99d8a524df0aca331deb4d217df2fd755aaa0fc2acde36","sha512":"2c039d3c82a63c59bb3cf427f0205599ccce4c78fcd376e982871a894ebc2073b25e959ac5768bcb392d80efd6f78a99dfed7755c5a2912aca889ad8b4b89048","ssdeep":"","tlshash":"4c01991b1c5360fe22ea203ee73b2a0a22152a872141c0533d9c80282fd08242fadbcd","size":714,"data":"","first_seen":"2025-06-22T10:42:51.78747Z","last_seen":"2026-06-05T15:12:51.797265Z","times_seen":374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72ee8adb330d5ca4c5d68c08d2c82d4d","sha1":"51852bc01b5edbbf37ea930915b13bf25816caa5","sha256":"794eba715fe6fe2f8036b6b751f3749fe868102e0d1d1ba0ae7bf85de90f2240","sha512":"3e09f830b768b8a9814f106064fa83947183b3e0c3b6786a5a1fa46a28bb2f284c8233f603c50080c9a3571a1e3644817dd60c8df42b78e9f811f0ab4cf95284","ssdeep":"","tlshash":"01f0264a23b54270a46fa91f819b11083b518047681af858370c42d06f5efaea2b37e6","size":494,"data":"","first_seen":"2024-12-06T22:27:57.13338Z","last_seen":"2026-06-05T15:12:51.8497Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/js/main.js?v=5","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6409d98ed3cbf6db97d351f0423f42f7","sha1":"6052163324873f34d80ddb789c07a279013e9394","sha256":"ea0d7e711fb8baa35e5c6483f6e339b3c92b4f6f01877ec4fc659594e43a26c8","sha512":"f3ef128d5c31b477f5bb3c7ef3da3a103e74323e7d87b7f64f6c8c6e37e930cdae90b52b4bee1370779e9505a51d72ea1eff3627e7cbbf32f2816c1ce9dbe9b7","ssdeep":"384:GXKlo7s8RElXRnwlWsjdKjHYc4NtZYK7roO:GXKlo7s8RElXRnwlWYd0Qr","tlshash":"4ba28298b22129aa813b7379be775646fb380027d341d349bd6c1de11fb2480d993f6e","size":21541,"data":"","first_seen":"2025-02-15T17:58:10.504157Z","last_seen":"2026-06-19T04:15:48.652548Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-07-13T07:00:23.595661Z","times_seen":2215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1870326e7e2581c17a2d8483275e697c","sha1":"12e42d5cffaa0dfae1c50982657599d032c1f5b6","sha256":"f178f3a61d6e863ab5041c32429147a5685afd75f730d9338aaa3ded19c3be96","sha512":"9b910ebee21f3ae000b4ed67e4c36c6a91827f9b6609a2f7e859b56e076a83e751f000ab179583038f5297d121f7d06b4c75448b66d1a69e339b6397a398d025","ssdeep":"96:By5RgaBWaBMLPND2n/a7mLp/gDJPYpiS4eJJWOhev0nvDJeYQeeJJWOhev0K:SnfyD2nQmVgsYOkv0BsYOkv0K","tlshash":"23d1436c99ba192c607770eb1a9f47099191e10b3e86dee97e0c43505f7a07cd4fb389","size":6663,"data":"","first_seen":"2024-12-06T22:27:57.134398Z","last_seen":"2026-05-15T00:39:55.753747Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/js/toastr.js","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","size":24854,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-07-12T17:18:15.102182Z","times_seen":939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"187ffe7a12d1079ea1653198f9e19187","sha1":"67df7673867ff5f294eaa8f1f1eb58c9b86bd673","sha256":"2f27bcf471b2d69dd78494f6e2172fb28470eb843820e2f96bb85d39f9618d30","sha512":"639d67f66b4a4d5061dc96f1e6965224d0c333263ec867bbec31ad04fcd1960b1ffd82c2875de4499dc999f1c6cd814298e9ddada7f4b1081f33ae786fb749df","ssdeep":"6144:ry28GjjkD/6w7tKuhSGmexa2FiKqUN1eFRQ1Tomkb0T3N+2HJ8l/mXI:2akD/6w74uhSGmexa2FiB8eFRQ1TomC3","tlshash":"3314f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","size":208341,"data":"","first_seen":"2025-06-15T09:44:43.237994Z","last_seen":"2026-07-12T21:33:56.440007Z","times_seen":885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/js/noti.js?v=2","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4e9d980141a2f0090c51a580d1895b6","sha1":"d64ea7723a676c9f6b63b6fe46f7bb9fc63e8d21","sha256":"97634ea04b72a23a8a9e5c87670f5182c1a6d330627b225213a5428e68d30b1a","sha512":"1b2d5fc215be3b61e82dc357138a75569ec9bd2eb5051289a92ee653c7817adba128d1417afcb1b2b75a7633e901269c372adfa0d647c23e5ee1227ea33fe6eb","ssdeep":"192:Pu2zR+wyioZAP34P+67b8j38kdack34PT7r8kRr+giidqa34P17r8kRrYiEdqCZG:moz/a8j38k58kRrhiq48kRrYiEVq8kR3","tlshash":"c732726010da2923467f63bd9a525a1dfa22d10ba3072a913afc56c32ff3c54c6c7b1d","size":11295,"data":"","first_seen":"2025-06-19T20:02:29.423673Z","last_seen":"2026-04-11T22:39:16.757677Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__39.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__39.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1165\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAvr1DtvdueydtjxTe7m2R6TFN%2FsCbh3L1WigmUZoR32yOOyV70izdsyJlKBKwIqEUTHBbROgrMe4m4v4%2F4vpJl299CxOTO%2Fw%2Fmi4w%3D%3D\"}]}\r\ncf-ray: 9866727a899876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-06-19T04:15:48.340596Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__109.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__109.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2543\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BkncG3yjs2FheDvKD0Dh8xkjiqnncHzSzub5rH1cAwDKD7TWCAoxdt32si98b3fpKdRuKsC6RfCrMLEAwE9xutysZBW9toIymk80g%3D%3D\"}]}\r\ncf-ray: 9866727ac9e276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-06-19T04:15:48.419701Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__147.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__147.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2532\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvVp8TDZ5Xf6j0e45LThBxkFdQm4V53aE6uJpd6gCwH%2B%2F%2FBhFs4nu2X5EIECI8DNVau5Dh%2F287RfFViwIoQoWPGSLzr3NCx0hvL8Og%3D%3D\"}]}\r\ncf-ray: 9866727aea0b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-06-19T04:15:48.657646Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__203.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__203.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2496\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ohhsjZ3K%2FmoT2He9W%2Bf%2BSR7a6hTQ1SmA%2BWsrokPa2phTjhgtc3U18IFGz0OdElO60FBeXFq69bGNonv5wXmFkW9QIbHl%2BIJ6K71kPQ%3D%3D\"}]}\r\ncf-ray: 9866727b2a4976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-06-19T04:15:48.463131Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__167.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__167.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2501\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJTz7UP0qcXCi2HDZ85MClp9FDK%2FwnyBm68N7OFCrv%2Fl7Yhun1jLbtAcKvNDKXzVfhMpfjg0DvlGxz32EBoXERB1VNhpR4ACgGphqA%3D%3D\"}]}\r\ncf-ray: 9866727afa1f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-06-19T04:15:48.607614Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__193.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__193.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2501\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uc5y%2BX%2Fr1l4B1Oj5BU%2FY0HiiBs3y9gJkevzjdvGJZH9aPCT9QhQYHS1cmyQBq%2Fz2aiIq1FeBcszBSff45CY6rahzL81yWHm4JfRLAQ%3D%3D\"}]}\r\ncf-ray: 9866727b2a3a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-06-19T04:15:48.607614Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/header/heat-map.svg","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/header/heat-map.svg HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1ew9iVUwNq9zEk%2B2Pob6%2FpIIOV8MQkRE%2BZpsuaMXFaQcYulPnvCDe2aumRQ%2BeEf285mP0MoXMQpNHkGtlMBlCciP6QcdhXQjRd0BA%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 98667276790076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"38072961af3da72b8380c6bda9044a91","sha1":"77be88133c31a4fa727474e58e9c35e9c7225465","sha256":"aaafa49ae82df38a2e0e0f1ea10250fa3a8413ea51f17647df955166800ec3ac","sha512":"11ed3d0c9f5aa9b3ce174685ed7fbae5e64b8329bc89e84a8a5632b265d3639dcba5be2db03c59f8ce36ea002e6a3de230618bed077c8d567e3ef44fba92c1eb","ssdeep":"","tlshash":"d341b8e9173985790b08d72c5a797a061ef214d7667084acfb2e283a3783dd310c0f98","first_seen":"2024-12-06T22:27:57.04065Z","last_seen":"2026-07-12T20:24:56.412999Z","times_seen":260,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1264\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 0b19dee8-c858-456d-9d7d-e7001f955fd3\r\nx-mbx-used-weight: 142\r\nx-mbx-used-weight-1m: 142\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: R5sS3dkbqEMYVF_JvnTBXjNXPxjaojm5kaXLlf4VH4aIxIJ3BAlGAg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4162,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b8fc61e2a2e0be1b4516a8f2a690bdc6","sha1":"fb07f7f65599eeccd45528de074097c21df59cbf","sha256":"890b77515e05c089489aa74773977f98070d0bc7a8c680bf11ef1ad39f978c69","sha512":"48dce6a370c21cbe52808dcae78f06137a46e6fbdfbc45fb25c743a8906b3fd733738f6c2c1f24be8cb65ef46d76edb489baf884963cf18bf55f11ecde100088","ssdeep":"96:mQBqQ5uK3ZujqQVbUHh4g8yvIvBYGXUlBfkbmDXDuZ6oOi3YDEdxqZ/L5y:m9guK3ZuTbQ4g8ywvBvXUlBfcmDXDuZL","tlshash":"0c811771228453b4fd7d8d0a23d1faa59df6301beeda1dc099d1e73748e22b14e48b46","first_seen":"2025-09-28T21:49:23.788813Z","last_seen":"2025-09-28T21:49:23.788813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1400\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 6231f99c-d4d7-473f-b49f-37de334f9daa\r\nx-mbx-used-weight: 146\r\nx-mbx-used-weight-1m: 146\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 2Er80YSsIaRqilNe2Vx9bB9asHv_ooOx4sCMECSRpH7bB3Pl-p3M0g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4348,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d9eb20a510a5a2974ce763af8b0a2787","sha1":"f879244f9e68b7e1773242b33dc9a5506e3678fb","sha256":"3c2d94e6a780c46c47389fad2c5d7d3ee1eeb8ddba6c6da804d3e5eeb161578e","sha512":"f315aba5628e8dd87fc6c1a404f124082b94c3176591f0f6b58cd9d0ceaa34ba370024ab9f4d272d2febc140588094c4bab9dec0296a351a3025921a4c13f845","ssdeep":"96:mih9AdcOcBbeWRykwloRvpTF47Dkw+kEN9VYMp6EHigpmCIRskq0yU5:mih2dcOcpAzuvdFCZ+kEN9VhwEHigpmj","tlshash":"b491bf9243888774fd79491d37f1f86169aa305aadda1dc089e1e4f748f22728b4cfd2","first_seen":"2025-09-28T21:49:23.792049Z","last_seen":"2025-09-28T21:49:23.792049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1228\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 9c6ef57a-21ee-4395-b2de-695fd75bdf48\r\nx-mbx-used-weight: 154\r\nx-mbx-used-weight-1m: 154\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: exnUHRwytQsV-QNIXEW80M781GfMLES8tB4gUsPFDRQ702cC1mNkXw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4021,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c8276d88527e0efe8c5759dd5ad8187c","sha1":"65eac34ebb6b181883edd73779405eb810b22206","sha256":"461a4add2dc4dde2eb2f1fcdcbc57ccaf3c6da3ee1e1f71f01a1041a72b05eed","sha512":"df13bcfcdf62b2e1b8b405d057433eb14325c6c8856a28fb1747d3858753a8723f07541f627b5320c9d660d7745f99e324afcaaab72a7cf225514bc5e943a5a2","ssdeep":"","tlshash":"ce810691139483a0fa79490927d5bc652a7b301eeeca1fc08be5e7771ce23720639f16","first_seen":"2025-09-28T21:49:23.795113Z","last_seen":"2025-09-28T21:49:23.795113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__16.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__16.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1093\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ThZTNEecRqVsZXwycRPPWJz2RwoRzUU3gGNBsCLtfFgE5tx93mmhz%2BWDh%2Fopja%2B36dmNtQx%2B2EwLUl%2FKodBizwIm%2Bqo7JWQ4YWVLTQ%3D%3D\"}]}\r\ncf-ray: 9866727a697f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-06-19T04:15:48.337333Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__120.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__120.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2452\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xVwu%2BsMyrKKx%2BwCBNbHvzd8FRU5lUWge6TelDYOMQiNn0kcXRUzGhDJjgM5ayjh9CduQZ8Yok5zwMVtetxva7m89Vcuyk5c4uDe%2BcA%3D%3D\"}]}\r\ncf-ray: 9866727ac9ef76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-06-19T04:15:48.303255Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T21:48:48.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:48:48 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3mN5Ot%2BM06ioOlGHEPxXaDmxeyHsSlvLvXjDBQZVybb%2FHA46J4wc0WQX21YD7qtCEYAikpmPZEmk2xElvPC%2B9AWyXYjYwJCqTneeA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; HttpOnly; Path=/\r\ncf-ray: 986672753f8a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":240652,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1953)","md5":"ce6e1643eac477a837e4d07d4e0b6e35","sha1":"0192af49616707c637e71906c181bb4a7905c809","sha256":"25ca1e81cdeb4e3028dab3a57d60a58b110d42b46791f632ce8cf17afea1984b","sha512":"f89f1e12c8fca9b69ecffc81dded49e54b3d30f4746c7389e58e02f37e929fc6d4e109b7b7a3d757f9a1c9797ff9c2bdea881fa44ba0e7b3e87e515ba588b4cd","ssdeep":"3072:s/D1+z5NanddyhZXIuy38MlhBBCGD5MD4:s/D1+z5NanddSZXIuy38MlhBBV","tlshash":"72341be022f015e1900293e9bb764a6a3b52d5679746c644b7fc1ed49fc2ccdcd83a8b","first_seen":"2025-09-28T21:49:23.799942Z","last_seen":"2025-09-28T21:49:23.799942Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":8,"dns":0,"connect":1,"send":0,"wait":114,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 23:17:32 GMT\r\nexpires: Tue, 22 Sep 2026 23:17:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 513077\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-13T23:29:20.716033Z","times_seen":924072,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":78,"dns":0,"connect":15,"send":0,"wait":15,"receive":18,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuohuan2.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuohuan2.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 3111\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UewNRkiRi2AkXpNb7XjP%2BfFfIxFWvDF0DUnFvMRnZjy9nilqBLRJojU57pp8yqzwtVZ2h41Wzf3cVsDypWYbkUNunP2psyr4NGLnuw%3D%3D\"}]}\r\ncf-ray: 98667279f95876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3111,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 202 x 108, 8-bit/color RGBA, non-interlaced","md5":"0181c213204cfeb8732de816266bfd3f","sha1":"783fa913351a35a275646c48b8dba3b656f93aa5","sha256":"433bc635bdb05472179c3e705dbf9e6cf8d552dbd8691088f8d2747db7a8b832","sha512":"3a293cd2f4f4f493195389aae736976c9e82901572cdb278aedf2a86a33e5cdfc521f176017099dcecaac6f4fe65edc88023a702148672f6c2ad9a86ded895e0","ssdeep":"","tlshash":"51515dd0cad09c77faa52429b0f41b4c48ced28183914dd0963ecd4f3757ea1513a203","first_seen":"2024-12-06T22:27:57.128659Z","last_seen":"2026-07-12T20:24:56.385513Z","times_seen":167,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__53.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__53.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1129\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0ExuiY4%2BY2evTFTxAV6DIX0v4HQEiGKUtTJX4MRBGN%2FnEB3z50W1kVFtqdowauLF%2BhYM5KFNTZl3Y0%2FOAq78LwGwuf7aPciIx4MDQ%3D%3D\"}]}\r\ncf-ray: 9866727a99a776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-06-19T04:15:48.405996Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__81.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__81.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1093\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjOYGGhhobsTemQHGV5U3Sb39j%2FhuGypr4j%2BOJ%2BLW1e5mgvd4Z3bd4h4MgiJ9EhJLj%2Bdugx48O7qBDX8iakU8HZv7rg%2BRSymcL1bqg%3D%3D\"}]}\r\ncf-ray: 9866727ab9c376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-06-19T04:15:48.337333Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__184.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__184.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2379\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=finO35a22fRz1YYXP8m%2Fwv1UCpDcHqswjQm1eMY997zA9bmeFCttQFLwx%2FL8%2FfP%2FhnwqIXALT233sK%2F38%2Ff2WqUHsct7C3XBeLyo4A%3D%3D\"}]}\r\ncf-ray: 9866727b1a3176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-06-19T04:15:48.549093Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/coins/BTC.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/coins/BTC.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1125\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TT2pBVDcdyl9R%2BhMEjOK%2B3yum%2BnGfoqzOB5KRFLuigAXF1MNkdaq%2Bq5vjJ06KiPhs3Zh4FWxkrYuxxM0tc604PQv6w99UOntG6WqpQ%3D%3D\"}]}\r\ncf-ray: 98667276790476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-07-13T14:12:35.485125Z","times_seen":1755,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__35.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__35.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1082\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dr%2BqEvXztszfCq5WjnelQyF6gg4tVVb01yQiHzwZHHKAT%2BRVs%2B0FY%2FVT6LSOhgbWP9w7plkRItJGs9SuYdc85mnoVO8SxnxZys2DYw%3D%3D\"}]}\r\ncf-ray: 9866727a899476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-06-19T04:15:48.518374Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__148.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__148.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2543\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HuILZgxuXHD0lNH2lIgXaQa6nUfqtGc2Wfrj3ZhHyyS9izDjkv8JdBE107dfJFSkIAtfLRo%2FBivGWVuRrduT%2FUSe%2BlvvzvDmkFIi%2Bw%3D%3D\"}]}\r\ncf-ray: 9866727aea0c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-06-19T04:15:48.419701Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/why-we-1.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/why-we-1.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 12834\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LgCRUIqKnajn0mCN7aL2XRBr4GEwz%2FY1KhO7a8yIzHCt2evIkGuTMhV%2BxGdoLejcdNJvklt5DEKbhCg2%2Fzj9R5pR3VQVovdsO6mKw%3D%3D\"}]}\r\ncf-ray: 98667276790d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12834,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 436 x 378, 8-bit colormap, non-interlaced","md5":"eb45fc67aad9ae7def6a56816bd0a898","sha1":"45defeded6011e48448cf9833d985f6e73cb5461","sha256":"07aa2ef2ee9bb569954601ccd1e881ac21853ca1dbe4b405b165879df0b05b0d","sha512":"28c58b0a6614ceb5c50462bcc9c64dd4838ebbdadb999a956ec890e2a95a21658a7e168439cb89ad92c026f8b93aef5e654db291334bd286a87adad59a871f34","ssdeep":"192:6Se6fEotO4b0G6nlB1m1Qpu4M9AgfveGMVZpL9zOZXQYAzjyxTI63SmN3:1XfEodH+ewKWTTOtQ/zGTI10","tlshash":"2042cf5ebc810076037c077280a6e366c4da0c0f943a5f7292cb3d71ab33b0a21c95f6","first_seen":"2024-12-06T22:27:57.019511Z","last_seen":"2026-07-12T20:24:56.401606Z","times_seen":177,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__50.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__50.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxVxOwZFqbEnZZtG5xtyHB3r4NzPDeGJfl%2BE1foBeITmzvENcc3G9Q0Ye6Zhd3lp7rZfr0B65znrNmBPu%2BDaOsPrlTMVX752nFT1wg%3D%3D\"}]}\r\ncf-ray: 9866727a99a476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-06-19T04:15:48.348198Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__68.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__68.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1093\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRQzCLEKzb04pFj4BEdF0J8cpuIKBryHH70Rk20Ne1oACQxTYLKG8pjP4RAB4d%2Bs1ifDhZTwoa6VrmEDzK4Obzrs0xcjcHxKfrd6kQ%3D%3D\"}]}\r\ncf-ray: 9866727aa9b676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-06-19T04:15:48.337333Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__169.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__169.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2605\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvLeI0h0UnKdsv0k3hRxQKAk5SmSiqO69JO2YD3C1br9OWKCLfGqJ22V2PE%2BeSaCz74ZMFIrM6Pl%2BZlE9UY2W%2BRZAHr6sqb7ZAfJYA%3D%3D\"}]}\r\ncf-ray: 9866727afa2176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-06-19T04:15:48.411522Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuohuan3.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuohuan3.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 999\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DYk3Xb9NJx3y1Xa2IYLidTjz24Y1OpPcVcvvgye8474hc0aD7KxzawJHkK17g%2F354J4w6iS%2FlnBUX7EOg5m%2Bst48DA53hHH6WJx5lA%3D%3D\"}]}\r\ncf-ray: 98667279f95776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":999,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 87 x 49, 8-bit/color RGBA, non-interlaced","md5":"653430d55fcb718d6174f5cdff6126bf","sha1":"d941d849178994023e003eb1efcc33ee6f2f9174","sha256":"6dfcee1d5cf1d61e616f0af2f4b83f1849942d81c8f5b56cc4ee18d906b533f4","sha512":"cb0b313447a60df835778d187e9503926fd82e7546175639a5a7950b2d9fe60273d05da475697bc5ba144620b369fb125d64f44487e2e7d3884d4f66d1beafc5","ssdeep":"","tlshash":"8711a5121f98d8a4a13e79f183231c01f641f7dc9315ba1e558ca5598ef11bc61e9413","first_seen":"2024-12-06T22:27:57.045336Z","last_seen":"2026-07-12T20:24:56.409493Z","times_seen":167,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__1.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__1.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1129\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iaSesp%2FHcSYp7WGAF7yZNenvU%2FPhApsK9kVZToQz9rQiQOk7vaA4kFb7HZN7VTZIxUM2jIMAOMXiwIYdRlvPO0%2FsV6C72rl0g3e6pQ%3D%3D\"}]}\r\ncf-ray: 9866727a396f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-06-19T04:15:48.405996Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__69.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__69.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1128\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCVLqbQA8wA0OJXMG841pY3DINgukitsT7%2FtImXv90IsSOARuAOUj27C8WqtRBKqClj57eYgOc8%2F98Pekh8ctUdBq%2BBDoCQNxNkkiw%3D%3D\"}]}\r\ncf-ray: 9866727aa9b776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-06-19T04:15:48.370678Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__71.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__71.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1146\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSLthMzaAQAk5iEIT9r137e5AoSWeQK1NZwRRnQcztnoz121NkTjtNqZyTpv%2B7B5nZfCTIefX3wipXLSdHScQNoFKgiEHpUquxZ7Tg%3D%3D\"}]}\r\ncf-ray: 9866727aa9b976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-06-19T04:15:48.287275Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__111.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__111.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tK83i8VYS2SLXYcyctZfAhEfud9BEi4cH5DvhcwV7%2FYO0DGZhm9lVDAid5juWRy%2Bm%2BaBZMU5QgL%2FzO%2BJM1xbTTEA%2F58HdhiQkrMMBQ%3D%3D\"}]}\r\ncf-ray: 9866727ac9e476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-06-19T04:15:48.374388Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/css/root.css?v=3","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/css/root.css?v=3 HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dcDXd7%2FV3EaxHHtdmMCK%2FY4GumED3QUwjcKeD55IBAVDB7FPo59WGGpTKMLZzNJ%2BO8d1xV1mvpz0IgwbCbmq9%2BEwHW6YmskXwXqfsw%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 9866727668fb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468156,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (11070), with CRLF line terminators","md5":"17e9c66874fa4ee2b2d505f9d8b0253c","sha1":"bd65d8319e947d2af575f0859ebe0e5d880f1f3f","sha256":"f7cb98f4c1385cb18cab1120b65f2623b790c5b6db9ce14231b82260086c3582","sha512":"d2b602575ef072fb4297c9fae44ceaf59417372e51eba427982bb4fd93d3519d1e73db69fdf66e4912b9230b4393f992319f60ab7b9ce8dd5902e85a6883df1b","ssdeep":"12288:mMlXqMlJMlXqMlXOMlX6MlaMl9lQbjM9MleMl7MlUMlkOMlJMlMMleMlX7MlXfM2:p","tlshash":"ae2583b7e546140341739a7b9bd3a378db7c40278b0160a639eeb5448ff42958b93e8f","first_seen":"2025-07-31T10:57:20.232971Z","last_seen":"2026-03-03T17:44:06.640263Z","times_seen":25,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/why-we-3.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/why-we-3.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 35330\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzflj2ZU3YqWFW2dU4rP5z1qBFbSoGO1S%2FByJps0HBNdfuAgFKRMGB8YG3SUGTCsqN8ZQysrTDo7E6pSCPvtKD2NPwmynh1mFPfjoQ%3D%3D\"}]}\r\ncf-ray: 98667276790e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35330,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 436 x 378, 8-bit/color RGBA, non-interlaced","md5":"75db13442d06a1f1b627fd56194df892","sha1":"b2ce9f2f5fabde14dec5a939448d28876e946fe8","sha256":"65527f9f107b75b8ef337d5d2835c23f7dda0f51fb0c8ec220ad97be8bdb6985","sha512":"2266af931fb038e9581025a6005dd226674b2dfb7912bb8d611fe9dfd89f6c11be27baec78c1c13f34887d91b597f5567eb85c4e39b2f6dc315b71045fae6d2a","ssdeep":"768:sc3FOz6Nwy3nh3gHDdYyzXbG2aCPu1ySBfGRyj6nyCpCowtnIVkhl:7VN5hQHhY2LG1euGySCojkL","tlshash":"d2f2f1e3e96bae9ca5eb8579d4a40a4f3c170524d4bd420efdec38491f7b03665c4853","first_seen":"2024-12-06T22:27:57.025646Z","last_seen":"2026-07-12T20:24:56.490273Z","times_seen":178,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__38.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__38.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1127\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=heGiA4YrY0mEor4uou0XRiIk0Ap43OGBYA0iwYmONaC42tiscmjvaaukbA3gAWcBt0VCfMBmZfuxZvo6v%2B1SW6jT1qk%2FOctIeigbgA%3D%3D\"}]}\r\ncf-ray: 9866727a899776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-06-19T04:15:48.328648Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__110.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__110.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2459\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5hWJudnNOxTwEPVDRXTvLuhCvE41%2Fl8o%2FyRGJ3aZFEhXPcX1oNTZOKkF%2FlcPCwSkVR754tXAdqBYpMJofCkK%2Bg24vjPNPjRxf1tcg%3D%3D\"}]}\r\ncf-ray: 9866727ac9e376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-06-19T04:15:48.502202Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__178.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__178.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2519\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1W93hbuOojYyi4KqJ1s24ES5NNzDvzfDaEc%2Fp5hJqSv5%2FoEpSRNZooFeU94NSOptTiWXDCNr51Fay0%2BHlLCSaF7bwKwnSVWr6PPiQw%3D%3D\"}]}\r\ncf-ray: 9866727b0a2a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-06-19T04:15:48.27377Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__197.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__197.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2379\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkfPhCTj1dFyVYVpHFp12g5sd6eA6iI8n8340G%2FbnY9RKk75wkiJQ2CrP9L%2Foaai6r%2BOIQQLC2LSgst0HqzJlYP9Yfk0uIml5uZlqQ%3D%3D\"}]}\r\ncf-ray: 9866727b2a3e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-06-19T04:15:48.549093Z","times_seen":156,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/header/market-screener.svg","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/header/market-screener.svg HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Bi2JXt4pnP4TFBO73W1v0WpyqabEngSkZx6%2FiiyuProQHaA1jCfGwy7wORpgUpn32as%2B%2BJkmiv3MQ95RWN3anQSSfxhi7WA8sAPbA%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 9866727678ff76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"24c7b0b83795ef8461878325122b1499","sha1":"16a34c45d1c3bf263a890fb4689c36b5c48b8db7","sha256":"b08c1bc91d0325fc5fd89b00e9cf7aba49c3341fbeb71f1782013bba8bc37287","sha512":"3137f70bbdbdb7822f6e1f273d22e2516383c0567e92900b6bec7570b4918aecc772f6f7dbe0364490c35f0d7ea06bf9d734a16a87c0f1fd54a65c65f29c60f1","ssdeep":"","tlshash":"8331d1dc50d6c9f9aa64c70417f89f95786238fb3250459cfebc64273b824a4309ced6","first_seen":"2025-06-02T07:00:29.919137Z","last_seen":"2026-07-12T20:24:56.420084Z","times_seen":256,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/mobiles.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/mobiles.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/assets/css/root.css?v=3\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 369880\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PE9Fhb4X84oTOMnIrufBdbZwRIioMed4QTlUfqYCt9ip3zFpEWZ9F%2BI2HozLwWI2HPdzlfsqWdSzH3al8ZI3ak%2BMmgefXvt8J6Hfcg%3D%3D\"}]}\r\ncf-ray: 98667277b92a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":369880,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 1734 x 864, 8-bit/color RGBA, non-interlaced","md5":"3da829ea84dd8a69db31b0af1054be29","sha1":"5d42e3a3fe4da5142aad727fe035c40188271cbe","sha256":"3d5b2e209afbe226941a349ab2b457dee6b36aeb368ba94c99bf0d540c23ea93","sha512":"f967714c6306050d8dd3fd07d7b0681ea9ff8fa6d8537b7757c873d712cf11ef69fc340f5ae4f4b9d9e43fb1e6df7ff7e55825d3b94851275f1763bdd1002f05","ssdeep":"6144:NByLmVunDtUOnhXZGXWEPqj2LAXtjug/Xfrxaw2bmZu1LNDbEr5RgyGWhEncX7sM:byM6D1IX3qjGYuMfrxbXZuRWr5Rgdtnq","tlshash":"0e74234e59aac7afdd5371b67730cb9f7b7a27012c08c8090fb69803a68a765761cd13","first_seen":"2024-12-06T22:27:57.036061Z","last_seen":"2026-07-12T20:24:56.397873Z","times_seen":177,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__134.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__134.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2532\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VddxpUD%2F0zz9mDR0N7Xzs9D0gSujpJVGutq4GSdRDLsLRCe0WQT0EGHgpefWhp2AaAEe5R2UQaEJLm9kVqL3Oj%2BMDT5wfQ1OIGxOPg%3D%3D\"}]}\r\ncf-ray: 9866727ad9fe76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-06-19T04:15:48.657646Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__150.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__150.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EmPcwxmgPlDLAYeiovjCn2yUNjPQrDear6FMb827wVLDnuTJ43aA40FhqzlT%2FDrBAaXGoVNTU2UjzAQ3A2j4%2Bb0wx%2BokpWe6j4GjVA%3D%3D\"}]}\r\ncf-ray: 9866727aea0e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-06-19T04:15:48.374388Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__162.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__162.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2459\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNZan4FGL1%2FkW6W4IejyowQykBJzvqcoyC6Jaqd817s%2FF4aHQVKihHwRudSGi0BiPGDnL6%2BIdSz2VKlP%2FfZzrWqY8%2BBhZnxautVCCA%3D%3D\"}]}\r\ncf-ray: 9866727afa1a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-06-19T04:15:48.502202Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/coins/XRP.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/coins/XRP.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 953\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vb071%2B7kM4koPGk2YSSARImmSvv472%2F3xJz2OLtlMQlOroyYXhZT6CBPBMrzrxAOCc3LqhzOWXt%2Bgpqyqe6qpwfbK7s9XRVv%2FpWtUg%3D%3D\"}]}\r\ncf-ray: 98667276790876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-13T17:55:34.583976Z","times_seen":1558,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1258\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 2ce57eab-a837-40a7-8e63-3f1b24d289a1\r\nx-mbx-used-weight: 152\r\nx-mbx-used-weight-1m: 152\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 0BL7u78BQ0QvngYGN0Z-7eZnWyIpcwRLHAfgsuYzop2M_CiQ1g_Tug==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4095,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2067fc75764001a1d70e003847603d64","sha1":"2e1858ec0560f3ab825ae78ea45a0ecabb1b95df","sha256":"bbcb2ef8d010d066af86898d6bebd950d4f3ad226d0730bad1029ecd91aff214","sha512":"b66fdcf8f31e4d49ddd6271196b35849ef36b26cdc35694871b9220318d68fba564ca465605224d8bc97c420daaaed8ceb1b8fab77e0cd9642bae82f79125749","ssdeep":"","tlshash":"4481f7a5e358c7edfe794d1d2391bdd7096a305aadca1ec0dbd1a73308f22b20648716","first_seen":"2025-09-28T21:49:21.273661Z","last_seen":"2025-09-28T21:49:23.82052Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/XRPshang.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/XRPshang.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 4255\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2FP8sHI7SDtNxX%2F4ygPyEMO0r4HiBXEbiLBucsyI2uP0y795KpMN6NYH3DFB4w3RAkzVTKi53Y0Nm554GETVkVt7E5dBGgr0ERQV5Q%3D%3D\"}]}\r\ncf-ray: 9866727a196076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4255,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 118 x 90, 8-bit colormap, non-interlaced","md5":"0f1ee41f7092fc174ca6812e08adf312","sha1":"8b3e5477207e610b424165ddfbc7c5c3ffbc54fa","sha256":"f5e584a75855b773019d2220b62015c1ce74ee07a15c4509027568d01246485c","sha512":"c597fec14fd866f23371ed15e8e6d7f91d702334312013d86e09075be02bab8efb5144d633732c3ac163c0c1eac3a21b262ae4e4e1249121b1746908b4e3f7fe","ssdeep":"96:+5Y9wu0gYXM9NbIqaSYx5+gmSRV9vRkKEawdCTf:3wHgeobXa6gmS5TXwQr","tlshash":"7c918ef56b63003fd2b6454941698e0a9c048d3635eefa0431ccb27e9ae6971ca5b493","first_seen":"2024-12-06T22:27:57.050196Z","last_seen":"2026-07-12T20:24:56.414413Z","times_seen":167,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/bilizhao.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/bilizhao.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 7463\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C17OuCKAqs6CCATb9%2BgT5tI5k4diKiH7a3B%2FWnNtM0egfWv260%2B%2F2gPaFaJ8oaQbtQ9MpUOEALMftqvsPRhfPH3aidpZ7rgJrU9fbw%3D%3D\"}]}\r\ncf-ray: 9866727a196476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7463,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 280 x 296, 8-bit colormap, non-interlaced","md5":"44ee985ca4bd03a10ad2a0ac98effeaa","sha1":"4ed84dc20640e36b17bf1c01231ba3f24a4562fd","sha256":"78533863d18e0541dabc1bc64a0d4f87ced2e9d56e5ff4a4f9f1f233d6352c37","sha512":"99e6940093f755763269349e0e9d49f71fe500b32406aaa645940357c4c56293b4bb4eb2cc31f4d8ff2899e8588446ccd8d5426f81822e80f6be13fbc7d3dd03","ssdeep":"192:Cve3GC3dHSdmsEnFFClp8rPFIKSl2UGvCnQFcmAPaT:CAtcmsmWr8rPFmkCnccE","tlshash":"a6f1aeab1d01592ed79ad65fdc4295a2af83f8258f0187bb5b3cf8da3c18f050c2c081","first_seen":"2024-12-06T22:27:57.055677Z","last_seen":"2026-07-12T20:24:56.432822Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__73.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__73.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1085\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oh70j7t7y1tSVvtdFnadNY9Vg9cevq%2BNjscE91VoQJcl%2BaGevxKxyb65DEBBex786YsbB0yGfLPK9lLuCv5NG07QAvWeDxyh2qQplQ%3D%3D\"}]}\r\ncf-ray: 9866727aa9bb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-06-19T04:15:48.292299Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__0.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__0.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1165\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=luXwUWCB3%2BCOs6K26JUOz%2BDPeYsH77q2dT6aS0kaFFxEMwF1vyb2dWtZlB%2Bw2XcoY3%2FvXOoKTA0pIbqfkBF42piOARP3Fe%2FlNavnvQ%3D%3D\"}]}\r\ncf-ray: 9866727a396e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-06-19T04:15:48.340596Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__34.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__34.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1085\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66%2BVGgr8JJm8WY4a5FTXOaUKzjBn66EWaMrt8M6rkRcdSQUA7BeFsqYLKBvVvF2WZclgWBiY44EgjIH2IWElnZ2unPEr1VPgjY7sgg%3D%3D\"}]}\r\ncf-ray: 9866727a899376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-06-19T04:15:48.292299Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__137.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__137.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8DUm34l%2Bx4Eo%2BYskHDp2J%2BeDvGRNHcFKbUPoByjcKkFuSz22MxSL9VJRE%2FDmEwT%2B8f5hR%2BBmEaEqD%2BWhxmqMhSPymICLua5uxMznQ%3D%3D\"}]}\r\ncf-ray: 9866727ada0176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-06-19T04:15:48.374388Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxiaguang.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxiaguang.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1135\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7T4kmT7tYhe9KG268tHH8yt1XshjdHiyp%2BvUsOtkNncAIwRJiJk%2BC18Qw%2BZFX8TPNNMJEzID8r6eD%2FvqQE1ZIl0d1hKtCvCKljpfHQ%3D%3D\"}]}\r\ncf-ray: 9866727a296976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1135,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 120 x 80, 8-bit colormap, non-interlaced","md5":"e83e9febed063035e9be9010bef47f2c","sha1":"a626fb28dc9223ec6f98055e49a87b1d365c521a","sha256":"90635677d137fee428a6911c7280d02b974d8d9d45dc61a5e58b7607a2f0154e","sha512":"1c909f4224c7ff5fd948160d81702730ad3760b8694cd43fd0e84da59b344d7758700d01a995c24f12d6b5f2fc5b7e73c7b62d223a8ca82d3ffe6bd661ec315e","ssdeep":"","tlshash":"b721655bf645469c8ebf1da12a8ece1fe0760242e4c5db1bf8dc24674c3f5833289166","first_seen":"2024-12-06T22:27:57.062647Z","last_seen":"2026-07-12T20:24:56.407317Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__15.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__15.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJchyjuNVzodJ5D%2BY4SAqxxVTgJ4SMAkLs1hqMvT%2F%2B%2BguQ3rStibuuKeUEBXsoZIternxF%2FRnW2TX4y9X2iQRB5TUNQx8IoTJiR6eQ%3D%3D\"}]}\r\ncf-ray: 9866727a697e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-06-19T04:15:48.295262Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__33.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__33.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1076\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NfeFVshPeO5weDq2D0irqdkFhEHIHD8sptb4SLuNdVBTWB8DmtodV6JGVPLFjdjB8ltMn1EIjxLK2fcVArWCK4A96fIkKEU5NQKPFg%3D%3D\"}]}\r\ncf-ray: 9866727a799276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-06-19T04:15:48.331559Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__77.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__77.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1127\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D80qF2sQz8eOgnyjCfkGl66xKTB8Wl1OGZYSIQ2C28Hi%2Fii7grkCjrKCJBBGjyy8cD2K8INLtCHLIeTrWcz6xmAR5eWhjrzDrE2pmA%3D%3D\"}]}\r\ncf-ray: 9866727aa9bf76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-06-19T04:15:48.328648Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__146.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__146.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2452\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQwUEAhjdy8O7CGN5lp53lVN7C0Je4HQX5D3mxC0ZWeUQd5OlQSUpJ1Kq%2F7y6LUsuNMXoDuickEUs5GymDVCK75xl17a1NvEvlJ01Q%3D%3D\"}]}\r\ncf-ray: 9866727aea0a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-06-19T04:15:48.303255Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__13.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__13.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1165\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FjuElskLrOY8ZQO5JyC%2Brg1kA7KHH%2BeW9%2BXkHdfGjddhv2%2Fp4%2B%2BGVQNHy8HfKWxhBswbdCto9P9PaiO5XKduhmkO5U1Kmq7Bz3vzMw%3D%3D\"}]}\r\ncf-ray: 9866727a597c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-06-19T04:15:48.340596Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__44.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__44.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1175\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cK%2BLAj6AzxKLua82OyDUQ42gWoZqZ0kBeDGOTsyst1pBzbRHljn0IzzOejXedMkjCEPIMhWCQf6Z3vzn85kx99GessLwAH%2FzIhh%2F%2BQ%3D%3D\"}]}\r\ncf-ray: 9866727a899d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-06-19T04:15:48.32584Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__143.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__143.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2605\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Xs%2B%2BR%2BtR8wutQmRXo8kU30rHQtfqEMGdomNfeRUOlhwA6WOzYgydUFt7vfCu4NQpDIzbq1NFJ7xSBRG5ob6d9lDHS4biP6Wno2l7A%3D%3D\"}]}\r\ncf-ray: 9866727aea0776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-06-19T04:15:48.411522Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__171.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__171.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2379\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2wyoBcBMXXOaIxYmxdF7kUrb%2FmIYtWNg%2FUeeLbwEOyXr72kFhSAr4BiEGxrmj7pjfRG7O99uN40lHC2d5yNwMpYHBeSfN8LA5afzw%3D%3D\"}]}\r\ncf-ray: 9866727b0a2376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-06-19T04:15:48.549093Z","times_seen":156,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/huangdian.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/huangdian.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 444\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0xSVNxu1%2Fst4FKbBapXv2pG9AVEpcIU0PfyrZANdH2uGA%2F7clHXTWjmAHu6cL%2BuIRxbLU9aDzddgYB2Y4aJhOS4P4VjIJNEXeNGbg%3D%3D\"}]}\r\ncf-ray: 98667279e95376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":444,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"cc0e871a6a3c373cdf50081932a09b84","sha1":"11c55ba981764fb7d132b015945c6a4dc81976ba","sha256":"62c26f0576efc99720f7ed6f2da6eeb9eb2f264882c92d177755cb2997c56911","sha512":"ee4bf0f055466e2a3d3eabb2c621d9a4c52fef6d692b5b260a59fa19395a37c09144064340073f69e81844e8e37ff929c582c01ee3fed4822538009e16f64db0","ssdeep":"","tlshash":"6cf0dc8682c280def66740a44a1c540d11b3f8d5853d0e58ba5cd4ab1dfca08b2a960b","first_seen":"2024-12-06T22:27:57.039383Z","last_seen":"2026-07-12T20:24:56.402148Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__52.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__52.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1165\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igAV%2BQEuUx%2FsBww%2BMzPiGjUBspB%2FGOqGtgssi4mjbbdBymQTonaKWuWizEKQqWnnuydMFzAUwN0tt63e0wuwGmYlKAaPPSrnm1b2oA%3D%3D\"}]}\r\ncf-ray: 9866727a99a676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-06-19T04:15:48.340596Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__205.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__205.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2530\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2FUH1R6E2LKtyBdcicb2BJ53vOLe6M%2Bvm1R%2BZ2yxqS4FrV1GGhqLy%2BoJBDDfva%2FlfFc0PXPg6Mgl7uaTv8Gl4UuywVAuLFZW2WfPtA%3D%3D\"}]}\r\ncf-ray: 9866727b3a4c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-06-19T04:15:48.460234Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1117\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 2ce57eab-a837-40a7-8e63-3f1b24d289a1\r\nx-mbx-used-weight: 156\r\nx-mbx-used-weight-1m: 156\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: cXm1-VETL2yEVFcs3pdZs_wJt12b3ysRU0c77iwrUqLQqGy6X6WrXg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3971,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c6df860e3460a8f8a364928917ebf7be","sha1":"2f17ad44062e6f10eadde1870d6e4ce3a4d17d90","sha256":"254cfbdbea5d19355335a7834f4a3cefb283bb64aca88e1116932c289b681cfa","sha512":"d39b75ccbd2b7347e0997482cdf07b76d3a9edb3becaa0ddd36110ca675d59ac69857c3d4ed2a7608673dc8af83f3a2b283bbc8e8a093944857e72b04f38f959","ssdeep":"","tlshash":"e6819e5252dc83b8fa3d4d0a23b7f9661566301abedd2fc185dfaa7708e22f60614f41","first_seen":"2025-09-28T21:49:21.315464Z","last_seen":"2025-09-28T21:49:23.829049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__115.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__115.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2501\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5s6PnLlQFLNJPjBM8r7qvCBSxChuPmZIW9pxL5dM2H1tIiFVEPgYx4YYQ6f99NiPYiXG51AuA%2BU%2Bm8vKu1gGrke%2BuP9RdJC16t37mA%3D%3D\"}]}\r\ncf-ray: 9866727ac9e976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-06-19T04:15:48.607614Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__181.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__181.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2574\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SG5VdIHQ6w3CUMp7CZHeHaG86U6WreEUgqFOHeSQQJr7X2XRhlVxOI1igAHTniS79lWyVJ8HyXkZlUc%2BxYEBFAC7B1zOQJGTuda0Fg%3D%3D\"}]}\r\ncf-ray: 9866727b1a2e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-06-19T04:15:48.567361Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__79.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__79.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1129\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iu%2FdIIRevclh%2Bod%2BABKluKrBniYS8cJn7YGU5iwdY7PqWD0X4KIczrd707VCuXY%2BYXa3%2Bhsim8dpuDSj3GYsdhIjvKqReDdrCDXaSg%3D%3D\"}]}\r\ncf-ray: 9866727aa9c176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-06-19T04:15:48.405996Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__90.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__90.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1127\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZIrUbAslLdePExqJxfDVtfaNqBySJ5DXMuXKpk%2FZqJiXkHaFo5OE69M0QGCvCcyvMP5%2Bdfdwsgwn3TgZZYgX2DpU%2FYVOv7LhWvf4Q%3D%3D\"}]}\r\ncf-ray: 9866727ab9cd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-06-19T04:15:48.328648Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__95.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__95.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1128\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sNzncVA7eQlFLM8xh8U%2FsDpHLl%2FzTb5TAXl5Ozrr5OnnBvzr1BlNnzZyyOXKppKDHvG7MlMjDVinMIAglbL4m2TPLDm%2FVHjBgpH%2FaQ%3D%3D\"}]}\r\ncf-ray: 9866727ab9d276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-06-19T04:15:48.370678Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__186.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__186.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2532\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=THek6Q0TleZRxK8QU4%2B1q2FXIy4O8KG%2Ff%2FFrgkJMG0drGz1VarCPbj%2BbvoWjxfuYgI6bMlKBzFmgxVJj3CNPNM3g%2BMCoqOaAU0gsQA%3D%3D\"}]}\r\ncf-ray: 9866727b2a3376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-06-19T04:15:48.657646Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__191.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__191.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2519\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyIA894ZSmRmrm1HJV8MtZbItYvVVSGVs5qHBwg83skvEctFTZ1lDdB7qwBERV3tHTD7vwGospPHLa1NiVwTV7IbNJW%2FXyndS%2BSYjQ%3D%3D\"}]}\r\ncf-ray: 9866727b2a3876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-06-19T04:15:48.27377Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__204.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__204.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2519\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erRci%2BGcFubifuPdSI3%2BEpZ0OlQY6o%2B%2F92GjaLurTgstMuwS2S6MKPYTna%2FuyzSb6%2BGn%2BHKY53G41O7uWE2JZMR8yuPcIMBGXxwAZQ%3D%3D\"}]}\r\ncf-ray: 9866727b3a4b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-06-19T04:15:48.27377Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__5.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__5.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1175\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3CprzykiWqA0nQQot2W6AVF%2B3zABGt7tJV5jfnUBQdGFvy2IUSmqUVQtcBh8ZWYiSs9LxH0J%2F9KJb51F8RzCFKaOKjbyOQxLgEIzg%3D%3D\"}]}\r\ncf-ray: 9866727a497476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-06-19T04:15:48.32584Z","times_seen":156,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__45.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__45.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1146\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEPyYGSqAnugJchht6koTPirUcjCNzxJ%2FaEL%2Bmv2ZeZCBVowQK4qQX2f24Jh0tjmEfCOMoSzk8ErGHMOaW4%2FYckbhLC4hGm%2FpOI8wQ%3D%3D\"}]}\r\ncf-ray: 9866727a899e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-06-19T04:15:48.287275Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__152.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__152.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2519\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X2J6gjPJ1kyIikNY3VOwTXcBrXrZubWwHdSJWWPwJOhr1Tvrf8KNvV80lEMj6xutHpQUILjTXCQU2iNlqISVoCk1ofQ4a%2FzwqqP8Hw%3D%3D\"}]}\r\ncf-ray: 9866727aea0f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-06-19T04:15:48.27377Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/api/getLocale?v=2\u0026lang=en","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /api/getLocale?v=2\u0026lang=en HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8eIjAuPpv8bBn%2BKe%2Fs00ON%2FmJaRuvvddnx7VlWnTTEcEe630Y178wvXbc55kUoz9MzhGAVW62d%2FbAyr5omMOn3cXE08Zpy99nt3%2BMQ%3D%3D\"}]}\r\nset-cookie: lang=en; SameSite=Lax; Path=/\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: br\r\ncache-control: max-age=10800, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98667277c92c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79557,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"55f06df3e73ba2b1d704c1a8ea0c91fa","sha1":"153e818ab471117dae5c518afac68524b65e6c21","sha256":"fff6d3c46d1d27c44e7f1eea877244989cf576ceee461d37c15fa4a759507c96","sha512":"9b4449caa0597fc39e2cdae13c63e8dfe89108ffa90541eb1ac3f9faa148392cbaf6611e111da61d1343dd24af08f797589bbdeb910040f39f11e7a149d961cd","ssdeep":"768:z7p/iImdbdEbMVlzhLqwxeAxa9w6ucD4aEIMfUOhBKGBEVSQdsoQcCSZBjsJUoLc:i9dI8JUOEprEZUO+GBEVSU2cPDsiseF","tlshash":"b073ea0b991e3d720bc61391bcfe5ddc75fd024091e1906a1afe84ac16adec9c2e7897","first_seen":"2025-06-23T06:44:35.035394Z","last_seen":"2026-01-15T08:55:18.1475Z","times_seen":29,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__141.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__141.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2501\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIa4mw4ib8jEMovLUkGc4CUkLbSSdlKtA9F2XdTWysTlANExlLafCZZqBTKyFQbG3ZQy4OtdHOfAKEZVGjcTwCUTtUCjRIjisvtVpg%3D%3D\"}]}\r\ncf-ray: 9866727aea0576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-06-19T04:15:48.607614Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/header/cross-rates.svg","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/header/cross-rates.svg HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6UEw3qm%2FEitiST4ZqUCsSTWufLklkgQtyQ4sCdU%2Fu6YdGjZ94KvCdYk8sajyIoZwxXhETXTmwR0ocg6vYmsrtxrwtZQBG4WfpSeztw%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 9866727678fe76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"9197cda83fe8496d926173548214b18a","sha1":"275be8becf5bf35748b30715fa16a23a3b1fab61","sha256":"f10b465bb31a5e56f2cffb2e43b2dd222b17387ed9ac48e0c8669ee0abceae0b","sha512":"b4ffd9827f1dfdd795497d16dcc6bf068f132162ffadc7f7ce641171e7478e933efd49b8c56e53a33b1810bc6c57060b8245b52378d557178a274fd5c88829bc","ssdeep":"","tlshash":"30510a43e378e674bb4cae5d71503a50667114bbfa30808887b61f6e1c437d7b284d35","first_seen":"2024-12-06T22:27:57.041928Z","last_seen":"2026-07-12T20:24:56.470349Z","times_seen":262,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__80.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__80.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OLcA5hIzdvGu%2B6NrnbQkiVvvXHgf28Ho%2BdubsJYFDKwBF3ctJi7fCJZQRhWKddwuaJRTSwKnsNssKDectS8bU0J8%2ByrS8lyVpJaGng%3D%3D\"}]}\r\ncf-ray: 9866727ab9c276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-06-19T04:15:48.295262Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__104.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__104.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=512Qcjd3VIDOle0yNoQy5bWyavnr6I9Ir946D8g48%2FRt5pUXx7GjitVvRQ1k6FlI1AuTJ0ULTjzT8a9XOybchUBi0wfUaENCjq0nEA%3D%3D\"}]}\r\ncf-ray: 9866727ac9dc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-06-19T04:15:48.348198Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__180.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__180.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2501\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPHst06kJKAX5q9zWCXTLpi7vMwhc7UMYUgNoJxAuXJfaWHoQ4DxdUQ2Bi1SenHzWopOQMGaR4DvKadrgxvqAM0GK%2FJuCB75zDWnxQ%3D%3D\"}]}\r\ncf-ray: 9866727b1a2d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-06-19T04:15:48.607614Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1363\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: bc679753-88e3-46f9-8dc0-4ae71eae9316\r\nx-mbx-used-weight: 148\r\nx-mbx-used-weight-1m: 148\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: hUA5I7MoXhGMB1uVD7B1BR8mWAeIUz_5NB5OosU9WOiBFJibROBKcA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4234,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0ecb44dda8d9239c7d364dda866696c5","sha1":"9f6b994f799c84108ffc084be712904fada547db","sha256":"532e75b9c89b5d15bf2109e94f37e748ba0bb5166ae44cb9da5132209cdc3e49","sha512":"0b23decb90a9385e0fe3b7e62978d822cb8b11d67ff55447e6c4b65dd9609d00dc568a5da1924c55b6cba8018b14435ab0973ba4cb7f0611f87a11d164ae6acd","ssdeep":"96:mGX3WeMjPVdhViiOUuqqvNQ6tL8cozPXLHySsqeGP:mj1jPVoiOUuqsNQWLBozDSSPHP","tlshash":"9691253322999360f9798c093791b865096f701feeca1dd08ae1f53758e17f28e78b11","first_seen":"2025-09-28T21:49:23.832428Z","last_seen":"2025-09-28T21:49:23.832428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__8.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__8.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1085\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHP%2BEbxKrR5sI3wxRUjdwMtHwMq1YfJVkDnLe9rBWgA8TBj2K%2F8c2LGCZYh0invBiULHLq0AW4VZA3oubKw2E7fhXI0Wqo7egim2WA%3D%3D\"}]}\r\ncf-ray: 9866727a597776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-06-19T04:15:48.292299Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__84.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__84.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1146\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yPgdIawjCOoStoXMO24uV%2BBAEMpO6%2B%2Bx%2FGtydigGEE1UyGQDNHYdJfVoUiQURSzSd9oMXn8R0OrR9xUU3GmruaAB7im%2Bl5Zhw3hiwA%3D%3D\"}]}\r\ncf-ray: 9866727ab9c776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-06-19T04:15:48.287275Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__142.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__142.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2574\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WULTmpbLRcAQoy53huawrD1lswQEuAQWLfuRu8dTktAI0qKbE%2BsrN2j5frGYs4euB18hzmKr0JQCc00cW7Ryycda5LyNc1Q0%2ByogXg%3D%3D\"}]}\r\ncf-ray: 9866727aea0676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-06-19T04:15:48.567361Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__194.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__194.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2574\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kP%2FboWqAf8jId6YrXa2%2FcvVG7HOoliD1vd5LO44GHadbzMQTg5%2BaUsNEzYiMXdThe1HuSsS6GJS2OLc9R9QUTqDZiljLJr1o7O3fvw%3D%3D\"}]}\r\ncf-ray: 9866727b2a3c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-06-19T04:15:48.567361Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1400\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: a70ee21b-eba5-4aa0-9d81-288c0ea20b0c\r\nx-mbx-used-weight: 138\r\nx-mbx-used-weight-1m: 138\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: x4QzeAmGpTLtr0C8_hwBzZeCisJMciXshTTRXVbB3Pd7sFuOziv_wQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4348,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d9eb20a510a5a2974ce763af8b0a2787","sha1":"f879244f9e68b7e1773242b33dc9a5506e3678fb","sha256":"3c2d94e6a780c46c47389fad2c5d7d3ee1eeb8ddba6c6da804d3e5eeb161578e","sha512":"f315aba5628e8dd87fc6c1a404f124082b94c3176591f0f6b58cd9d0ceaa34ba370024ab9f4d272d2febc140588094c4bab9dec0296a351a3025921a4c13f845","ssdeep":"96:mih9AdcOcBbeWRykwloRvpTF47Dkw+kEN9VYMp6EHigpmCIRskq0yU5:mih2dcOcpAzuvdFCZ+kEN9VhwEHigpmj","tlshash":"b491bf9243888774fd79491d37f1f86169aa305aadda1dc089e1e4f748f22728b4cfd2","first_seen":"2025-09-28T21:49:23.792049Z","last_seen":"2025-09-28T21:49:23.792049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__72.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__72.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1076\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMyR3u1FKmA7b0yRD6zbd9%2BDppzwLHh%2B7U2bbsjNyjn0mUtH%2BFa%2BEKWxg7MPB5tSmF%2F%2BkiNJw5dGmfnQNsen%2FecQgRqZ%2F77OZ1WORQ%3D%3D\"}]}\r\ncf-ray: 9866727aa9ba76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-06-19T04:15:48.331559Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__139.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__139.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2519\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3muwgTIt6UR3tHbNbk3uzR4AWvJsjcqbFrLeZTBEdbmqwlyPkSH9%2FldsYtVNL1rzQ3554HRVUYZCuKEvyK%2FTQehRM0p4eR%2B%2FhO6hg%3D%3D\"}]}\r\ncf-ray: 9866727ada0376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-06-19T04:15:48.27377Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__98.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__98.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1076\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmuWJExAt9%2FglcnDpygU3p2t4yzRqnHivJqhpz6rGGNoHDbiEmQMSrZVp9h%2FOYAI6%2BdozEyVDmTWea46flja8plgTTA1UyA6CiYWDg%3D%3D\"}]}\r\ncf-ray: 9866727ab9d576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-06-19T04:15:48.331559Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__132.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__132.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2379\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sP%2FCtEAzY4SzUO4s%2FmjlHgZ%2BGStgNV5KbWV9ErC2Pr52qwAeIIxdoMSyPbBJ0jm%2FfqfMOTkuH17u8IFzymEHkKRflocak3kSWFqoEg%3D%3D\"}]}\r\ncf-ray: 9866727ad9fc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-06-19T04:15:48.549093Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/header/market-cap.svg","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/header/market-cap.svg HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L9Mlf9QQ5hV7Q%2FOqgXCrA3dCsHUG8zDy%2F7SDM5lPgnyWtv4Uk5RIz4tUTX%2BFG4nu4FXEtvaCXdWI7ra0YHv%2BR0tncSVnypdQRheskw%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 9866727678fd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2411,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"9a158803d2e19c53560b0e584bac9d31","sha1":"8d8d86d15def4ad67061bee3077535cbabe7c2e2","sha256":"2e7b555e20af3a2eafb5cf7ad235d99ce39c58818c7dc4acec36acf808e04dc7","sha512":"a6fd891b73b76b772aa2e64065edee3fcb77b22f7247d1310e7724cd375568afbf9665c903da61521ce31efedc5dfadb0f2b69b15a314f2844609fd35d732440","ssdeep":"","tlshash":"b44145e80765473e56489f055eb94e9574206092bf62418cf37e3d2bffc2e9b208cc65","first_seen":"2025-06-02T07:00:29.898514Z","last_seen":"2026-07-12T20:24:56.429098Z","times_seen":253,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/js/toastr.js","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7euZTFfxTUng8jLeT9WtYPvrA2Y%2F6pUQHlnFXsM%2F31XJyDXCEs5mofgt6MgUdQXXq2TffOBu8%2BUETBbe9zcbnpRPji2fEqWC9bQs5Q%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 98667276791376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24855,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators","md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-07-12T17:18:15.102182Z","times_seen":939,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__18.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__18.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1175\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdbNryzmAS9feaEMMmEG9VMZJLp2h6eBTUGy80WPO4%2BfWkIcBVwN0NxPRxLEDyBfxIsQdP%2FBmchZCE%2Bx0UPus%2FPnOe13xWDE%2FTk3Sw%3D%3D\"}]}\r\ncf-ray: 9866727a698176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-06-19T04:15:48.32584Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__121.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__121.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2532\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2FfrOioTZZp3KOwULq1HP8Ocq726WRD1Y3uYID9Ost0oLuaVQ8%2BoE5BIT%2FZXY13HCPuzMPdc99Ar%2F22uJ9P4YCodgTo%2FldaVo2%2F26g%3D%3D\"}]}\r\ncf-ray: 9866727ac9f076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-06-19T04:15:48.657646Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__161.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__161.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2543\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=asPKMbaEW17AsB0fz5oiWFVf1cFuWWzFdp5nZjjUVZd%2F%2BVUnUH2J3K2oGPnN5CI7HoryGL7IqPbRtpILvmPXw7%2BtfLEKej%2Fc3XytVA%3D%3D\"}]}\r\ncf-ray: 9866727afa1976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-06-19T04:15:48.419701Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__101.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__101.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1117\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McLx0aYTJbNOw0cMYsUTpWu8sXFmizYxF2FtdSTdYIqcOUygSMEWLbAFIfUJ37R59dh0CGvGxRDzeN0OahktqL1%2FUctRTAVAJlmNew%3D%3D\"}]}\r\ncf-ray: 9866727ab9d976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-06-19T04:15:48.29825Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/js/noti.js?v=2","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/js/noti.js?v=2 HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQ%2BRETxxZfwsmexB%2FuZGlfWaIXXXsi1tU3fkQm1lG3PPVzBvEwvB2IpX2ctTWvZJPfIPGmHpKJvgBF4jlUL2DMBagKS1LxaB2MOIkg%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 98667276791576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11295,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"b4e9d980141a2f0090c51a580d1895b6","sha1":"d64ea7723a676c9f6b63b6fe46f7bb9fc63e8d21","sha256":"97634ea04b72a23a8a9e5c87670f5182c1a6d330627b225213a5428e68d30b1a","sha512":"1b2d5fc215be3b61e82dc357138a75569ec9bd2eb5051289a92ee653c7817adba128d1417afcb1b2b75a7633e901269c372adfa0d647c23e5ee1227ea33fe6eb","ssdeep":"192:Pu2zR+wyioZAP34P+67b8j38kdack34PT7r8kRr+giidqa34P17r8kRrYiEdqCZG:moz/a8j38k58kRrhiq48kRrYiEVq8kR3","tlshash":"c732726010da2923467f63bd9a525a1dfa22d10ba3072a913afc56c32ff3c54c6c7b1d","first_seen":"2025-06-19T20:02:29.423673Z","last_seen":"2026-04-11T22:39:16.757677Z","times_seen":58,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/fonts/inter/Inter-Bold.ttf","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /fonts/inter/Inter-Bold.ttf HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/assets/css/root.css?v=3\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: font/ttf;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6teK5dfL2zT1S0vzWq3kJRoI9KSarjITsJz0Rv1%2F2nAidax7jN%2F7DZnViSJ9IJCtb5mYaihPW8x0PVzul6fC0IcwR13eqFD7ACOLw%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 98667277d92d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316100,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 34 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte","md5":"275bfea5dc74c33f51916fee80feae67","sha1":"48747b7a60086f97af0d373febcbd1f1bee87f17","sha256":"790c108befe859dac2ddbd20af3fbb6917c601b3d544c8a05761519f3b5508fe","sha512":"0b82f93805dff2769bad25a503c6264094df6f403a636b039a8917aa2a1580b0c70c70ff4eb5135dda83aff0c3092e2a707216920685162ef52b395f82a86c11","ssdeep":"3072:kAkl4i5ZELTzK/PxMJ2YkGIKpqjw0K2pgm0J2Rrq41tIW+yMaf/J7oPHUGHYI9LN:VLTnJ2CW9BpW2RW1JaZWRRnQzSF","tlshash":"08647c03f313c35dc9172d3a8b92c7a0b327bc926b12e10ab7243a55c99b4f85e6b5d5","first_seen":"2023-05-10T15:50:10Z","last_seen":"2026-07-13T10:06:47.82059Z","times_seen":1572,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/USDT.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/USDT.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 5168\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2Bb7qfeR9ANXp8C%2FR6wgv2ZdtJsnnJDq4axOYRAx06%2BwE2Hm1%2B6tJSY%2F%2BLmXR%2F5yzu5T2AJ0E67cFfQFPagrYv%2BXmaDwu3VRKfSuAg%3D%3D\"}]}\r\ncf-ray: 98667279f95a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5168,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 127 x 121, 8-bit colormap, non-interlaced","md5":"6d51b47bd1e501579a784403188a2287","sha1":"96c8b707dfce3a8d060b662b60389f8d3886d6e9","sha256":"8fae335f5c13e7965ae57540c4b94ac61961c8e4ff6ba17154bcc97381f6dae0","sha512":"b127035ebcfcfa37f8217b92efcb3acfcca01fe2155c72a23814285d980de7c33df58f3a7beab3d1b0598ca6cb6a9969d6d2ad5ede38fd78fcd572c8e4925a5e","ssdeep":"96:OSfPimRW6CPBTGJNSvaky3yYcEBUZu/Y5VhU0h0FVa4++aQcWMxWg3BmeEOVkQa:3HtWBPO4vbhEBUWY5VyU05cL4gMFOa3","tlshash":"40b16d85bf3d40be35a3a98c13602770bebd274799acd9abe1843a8c909901107df577","first_seen":"2024-12-06T22:27:57.131232Z","last_seen":"2026-07-12T20:24:56.392626Z","times_seen":167,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__12.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__12.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1127\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Azr0NCCZIZ0o4X9H8qAdqcPH6USHwQMOVa7cMH0rd%2Bc6TFO5B0NQ6YbvYkOUgVooxys0uVgZUCQsr6p18XoCeJcf5K1rQlrFXBPcCA%3D%3D\"}]}\r\ncf-ray: 9866727a597b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-06-19T04:15:48.328648Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__19.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__19.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1146\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTNk0%2BfsN53v3FXH8IyKUbdSvk04p8wghX3FuvwUhWZCgIuRDcnLTgRdzUlMtL8WsRzhb011wyA9uL3Y6AfbpFcp%2BCI15u9m%2BPqaBQ%3D%3D\"}]}\r\ncf-ray: 9866727a698276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-06-19T04:15:48.287275Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__47.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__47.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1085\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggviCqW75qZNSWvCZi00r0MLlgeYG8fcsc%2B5JFiq5vWUg4CbFe1aLlQKVJvgt6jj8NhYICPIFTH7XN0urJpjZdRmOzc8XO4zkQwlRw%3D%3D\"}]}\r\ncf-ray: 9866727a89a076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-06-19T04:15:48.292299Z","times_seen":156,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/header/p2p.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/header/p2p.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 5440\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZjxegBQqjZp3%2FMimiXy%2FkTNzhLji4JULWfhLSUHtiIxj3%2FssY%2FnAY3o4w7ogVuTTEKVowPYkB9JoQMlA4hmjH8YzWBRRwxWHMZGww%3D%3D\"}]}\r\ncf-ray: 98667276790376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"ecf394d33dfc28501d3f92f99d490660","sha1":"0a51f4e56a04e40a05eae931cd68d86750a2c43e","sha256":"e003384304ceacbe2ab8f0abdf2ef74e1c8fc3b2a58c93a43d46afc0c3499eca","sha512":"c7489bf8a174dd7b4ee4ac736be0384eaf9a8601e60f777faa9d6c8803967400e579dcf81536182ddd4535667f252c5818038c9c2270c768f937c0d6eb66d42a","ssdeep":"96:+cVYcgk0I8QIMIat2wU9bmdT5DdlBa6hUGDN:wcgkrMa7HBaqZ","tlshash":"62b1d91ef92231d0224dae7725ec61155f3381979a81ac94f9cf48521f142ab1c9b6fe","first_seen":"2025-02-15T17:58:10.485235Z","last_seen":"2026-07-12T20:24:56.403094Z","times_seen":397,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 23:17:32 GMT\r\nexpires: Tue, 22 Sep 2026 23:17:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 513077\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-13T23:29:20.716033Z","times_seen":924072,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":108,"dns":0,"connect":15,"send":0,"wait":19,"receive":7,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__160.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__160.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2532\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0t%2FG3WdwhIF8%2FSnXs%2FL%2Fx16x%2F61PiqDbU2XegBRKUbbn0L7kjZQ7TOofQKUgr1DimtRjKcR4AG7r%2FcXAq%2BRkxPg%2BLcvNxcIAqd4OA%3D%3D\"}]}\r\ncf-ray: 9866727afa1876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-06-19T04:15:48.657646Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/coins/BNB.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/coins/BNB.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2560\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1yT6rJFTxAO7UaqMGkV10HhlL4mnxQ77PIsRKr%2FVCZxZGwgHRlzeqqWLY7EDVNpla%2FepNcww6%2Br3OQXaQG0%2BipA1uldKzsBwKjl%2Fg%3D%3D\"}]}\r\ncf-ray: 98667276790776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-07-13T07:21:16.858323Z","times_seen":1557,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__28.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__28.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xl7S14ecrlREjcO2UJsUySf9CEQf%2FMeq%2BS4cyjprjgb6gqvktB3wAu7CLdN0ySBIY94DU3kZcOn2WV9NS8L8lMYFj775hi5lOsthKg%3D%3D\"}]}\r\ncf-ray: 9866727a798d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-06-19T04:15:48.295262Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__31.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__31.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1175\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1aaOdE5NWvgG3IgMy3B%2Br%2Ba1O6bdBvszPnFYX9G6q0CizBFYj1AdbFhC6dBmRG8Ow2mUkYsyfqv0YjcxvpbMsrPoJhi%2BiVyurDIwQ%3D%3D\"}]}\r\ncf-ray: 9866727a799076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-06-19T04:15:48.32584Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/coins/ETH.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/coins/ETH.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgFFvoZoiOVVWCg0dqKNxK1K4vaWiAwBLjY%2FU8xqnR7kyW2b1idWZzi89ON38AGZSeuL8zuZPlZx%2B8LVAu0WrfxzRnmEPsODpGLwKA%3D%3D\"}]}\r\ncf-ray: 98667276790576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-07-13T14:12:35.488617Z","times_seen":1772,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__102.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__102.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tSFlWAaBP16VqSe00Hs7YPh4gPFdtMKbmme0Ao1F8hDVKehuElfvmwAxGuw5GmPbluD8aF6KJQiCvwzeR6XcDOrY4BZC2h9cfLI6w%3D%3D\"}]}\r\ncf-ray: 9866727ab9da76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-06-19T04:15:48.348198Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__117.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__117.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2605\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FpACcpwYCk5X8nk1z9L0gP8hVvcRJKBcQsGLeP%2BC%2BqQyNtkLef7FdLv5pkvz%2BeNOgTJFcbIyi%2BvChhXG49si3i1xvhrwEjG3hLgg3Q%3D%3D\"}]}\r\ncf-ray: 9866727ac9eb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-06-19T04:15:48.411522Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__32.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__32.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1146\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iSp8q59vkuxlyVdeCisYvbDzf2Gh6p%2BAAHveksN8yXKNqLOpqNMoWptIbDGrqi9YDRyRV4gJDeBBS4watwy5AfR0xQ9HY%2BLc5e%2F8NA%3D%3D\"}]}\r\ncf-ray: 9866727a799176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-06-19T04:15:48.287275Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__46.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__46.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1076\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UauYpYxjmyOHhYZV9omquOoU5OB00cT8y1BMKtfXyXe8iQxEHgoXxzyf0G%2FZKyd%2F0u88oxgHWdXYCMjTpC5iJ%2FNZeUGElPXjtTYtMA%3D%3D\"}]}\r\ncf-ray: 9866727a899f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-06-19T04:15:48.331559Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__158.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__158.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2379\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8VJ8oCk4oyz6Ud2eXD4F3e9qNHgoiTIbJS%2FYC5sImkDTLj9H9iUhQWR2yJ1VFF6GVAA%2FrwCSFLDQn5GNLF8DR9t%2BAWvaUDvqf1Osw%3D%3D\"}]}\r\ncf-ray: 9866727afa1676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-06-19T04:15:48.549093Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__168.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__168.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2574\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLDJfa8dfmozxZL4lXdL2lmdWnguwgSGFR%2F6QehtfLiHLFqxiBnpQctoE8gMxIq184E6CD7fI7n0D4hrNZn3jHv94PrCuNWFIdU9jg%3D%3D\"}]}\r\ncf-ray: 9866727afa2076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-06-19T04:15:48.567361Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/domain_icons/4_1758991012225.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /domain_icons/4_1758991012225.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 18689\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Sat, 27 Sep 2025 16:36:52 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 198\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMVeZ3HLv3i%2BWA1nZgVZAFAYCFfQ1ilZTlfJeeK9aRlmvKh8WlUfhBD38vIkLToa1aIv1sjIeuP%2B%2BxKEjxEBKFXaMUZ1J28HLz5%2BVA%3D%3D\"}]}\r\ncf-ray: 9866727c6a6776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18689,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"fcca4dc4f7ea6aa4af78ca0e55d31b78","sha1":"a29f2ed784c7c23fd5d96d34914594ed552a18b4","sha256":"227399ca2b5eaf5805dc110a60341864a0dd265c1a033b1ed5b34642b8e737ab","sha512":"8f4e975a4d0034be3319018f412dd85cc4c06d95158d9cd22fef245db02f0723e32ccd87a86d401cee47a91f773f29dc8c9ce03245450477faa4e522f0dcaaae","ssdeep":"384:kWLMFRQZlibpQETQ8EUyVx1qJM5u1BnvM7Ps2JJ+iqg/z5:NqQa1U8iLqJM5uvM7Ps2Jdqgr5","tlshash":"2682d057c2202b59f95b5a84e43a969e90bf2c05c96c0d1d784ac87b7f9307c4f48aea","first_seen":"2025-09-28T21:49:23.842273Z","last_seen":"2026-02-08T00:44:33.377365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__61.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__61.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1082\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjWzp%2FaBK5AFEbYUBiqLsB%2FixCRR4Ra5%2FMs2C5OEAJ19BDwjSAEJsskHkzOXwuOmcQnPHd3wK9CE0newlDBSJRRpoajc3K7ydtau5A%3D%3D\"}]}\r\ncf-ray: 9866727aa9af76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-06-19T04:15:48.518374Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__59.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__59.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1076\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9IcsJRXslX09ieK%2Bu%2B80l4kq9dE0GNKBSSHBnAmV2BPU0kpWu%2BxRmLCJxqZqv3cxAgnCXY%2BewMJ4M%2FliV8xfpkDAllDzgiW6JP6tZw%3D%3D\"}]}\r\ncf-ray: 9866727aa9ad76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-06-19T04:15:48.331559Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__70.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__70.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1175\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LR%2F%2Bb%2BsxDyX2xzLxXv6dKoVVTPVxZHlPEuf70VfXZptZHgjOQh4%2FGrFK7V46dH8Fyorg6w69qdOY7eTtvLJc8i0%2FBMUfdHiNhGvsHg%3D%3D\"}]}\r\ncf-ray: 9866727aa9b876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-06-19T04:15:48.32584Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__133.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__133.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2452\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2B1MPgrwhK5QgflbkYrufKHtNHi6gGTa61tg0SH6DDCAUCIYHUiIIB1wpLUtNnDOcmUPmdWjyxhLxBrlJ51cS%2BLKcx%2FduMrVsHwymw%3D%3D\"}]}\r\ncf-ray: 9866727ad9fd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-06-19T04:15:48.303255Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__207.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__207.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2574\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BtWtz7p2CDUxByFPsva9KGybwA6pP4UI5cK0ll4MyAXnkxBs%2BYWphUz1tbmQ2BUdC3HBABgozIM9u8nWLmE6Y42mWi9V0qcPonCiCQ%3D%3D\"}]}\r\ncf-ray: 9866727b3a4e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-06-19T04:15:48.567361Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\nage: 4090376\r\nx-served-by: cache-lga21978-LGA, cache-osl6547-OSL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 452711, 64999\r\nx-timer: S1759096129.042121,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-13T23:29:10.828902Z","times_seen":178680,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":6,"dns":3,"connect":2,"send":0,"wait":2,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__17.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__17.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1128\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TelQxsK61b8FS4ugofUTpT0MtcP%2FQ76h96jTZTXlMTPtSTIlWelQsM8%2BUgsgn60h7waxQKBcUpBP%2B7rj4i2yycEV0LmCHIj7%2BYhNug%3D%3D\"}]}\r\ncf-ray: 9866727a698076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-06-19T04:15:48.370678Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__85.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__85.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1076\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMezZ1Wv35PHpdNnT2%2FiAHm%2FXx33JWtHY1l9GJbmFY4exm%2BPtylnPd3Z89o5CVEVKpIF6UUN3v1g71oqIXUKM67NFAEbeTxcEl88BQ%3D%3D\"}]}\r\ncf-ray: 9866727ab9c876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-06-19T04:15:48.331559Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__123.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__123.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2459\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gl2GX%2BCgKqBGmu6Jkjs52iM1Ivz%2BQUrNxUfbyLrB70ltgVbhDFnz%2FShGceBrRCagH%2B4%2Fd3ri0onHoJhEw7U7TYf9fpPY%2BdspkVQSVg%3D%3D\"}]}\r\ncf-ray: 9866727ad9f276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-06-19T04:15:48.502202Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 77\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccept-ranges: bytes\r\nserver: nginx\r\nlast-modified: Thu, 23 Jan 2025 11:31:25 GMT\r\netag: \"6792288d-4d\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 1FLkydThsfv3Xo1A23WNPZzLDl68TtzhnJVzVSJEAGzkPYFcL1cmEw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"136f5552348d90a36b6c9a49046926c1","sha1":"b992325f95e0076c147ebf6593433f938b244f4e","sha256":"a60bafa499acbab1b73b92511707557400155adf5fd6a186cd56a2b822935ba7","sha512":"b790d85cf0597615435cf72e9384f8e640642a1cc3cc3564010a006eedbf5bcb956120cb81ebef9254d4675e785091a07d2cd79c66381fdc39b80ee5f4e48b8e","ssdeep":"","tlshash":"baa001f9a5a62009e92076c01cd532941c8983a030d24a102ac13969b55562ada06299","first_seen":"2023-12-04T13:46:15Z","last_seen":"2026-07-12T18:01:04.325883Z","times_seen":516,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":21,"dns":0,"connect":8,"send":0,"wait":254,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoqiao.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoqiao.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 5397\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PWhHBrDXCSpmv0KXDP4%2FcW%2BXO2OnQ0Q84hNBAaV5BGt7tXReOGmnvmM9228B1pg2fGoiCo0EEJjnnqsP8zogx5LJE%2BBkgjShpTSsBA%3D%3D\"}]}\r\ncf-ray: 9866727a196176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5397,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 332 x 143, 8-bit colormap, non-interlaced","md5":"6518eea67780de67389ec44462258bf5","sha1":"73406afd8708d8003bf05d2b4a92058df025de52","sha256":"eaad7c385e448e04ffb8f87273286c328308312aa04c4381ddb600151c832e71","sha512":"09e61eb5cec6351ee13b1ce853da84ee17d909d6ab166c908ef72fddaedd71a091431566eae55ba01fe3f11e043321e17a8097b3a2f41e9810317260c1ed7a00","ssdeep":"96:KvhAGFoe/eNiLjZCqblz5H7kgSRNzewCd6bTqbtJDNFvkBuldyBvpEcEHBG9+tiW:KJkULjBb9x7kfzZc6S5jFvLH0vmcEq+f","tlshash":"6cb17dc5423a1aead8bfb1b7b420ca97631007ae58c0f85f0d4d4b76a937291fd412a8","first_seen":"2024-12-06T22:27:57.054518Z","last_seen":"2026-07-12T20:24:56.502862Z","times_seen":167,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuotai.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuotai.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 13059\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=892LsWWCCR2hi9xJASuFVvgWZPn3dEpDCDx7Y2P7Vf0I6vO9c3udeJ1STj8WRwWuWEN1xg5zzaL2hWjk1ytIIBf9NbODfO9gUU6k0A%3D%3D\"}]}\r\ncf-ray: 9866727a196276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 310 x 246, 8-bit colormap, non-interlaced","md5":"dc06ad0e32ef57a127b78482ea33cce9","sha1":"a2dc99e6dbcce91b9ccc18a0926f7fcba9464326","sha256":"b672fd2a1562e8315bc120c76b452fea37b0ff04bb9e1eacb17dafcdcfb321db","sha512":"b524ac7efd349c94394fc8ccf63be17d8a37be80775f9034ae4e17bf0646d6e9b32aeba63192731c3df04e82e3bd3759cf0b8fd4f27bc221a51e3c2468d3801c","ssdeep":"384:VsV+yHeg03bSRhy/NaCwF4/tAStq0wc6nZ:Vsd+h3Gjy1HwF4/tAStcZ","tlshash":"1242cfeb6bb240402357d448c4613bf21816210de513e7e9cfcb54786c1acfe4c22add","first_seen":"2024-12-06T22:27:57.053426Z","last_seen":"2026-07-12T20:24:56.472121Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__11.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__11.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gf%2BVhkyZs9l2Rqx5v4eOIi%2BTIVwz7SrHjyW7EeTzWIUkq0wsCUTbqSHKKos%2F2opn7GrLuqMuZwLUFExo2l3BVMiC%2BrXFBg9%2BUF6XkA%3D%3D\"}]}\r\ncf-ray: 9866727a597a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-06-19T04:15:48.348198Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__74.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__74.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1082\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B4P%2Fzym1aFU0wvjpvsCH0SmgCECTJKt3cmHVuDBlEFagR2XlUnGlGOpY85TnRoD4H0gvBgkU2XOdRYmNM8s6rlrE7LRbAALiyC53FA%3D%3D\"}]}\r\ncf-ray: 9866727aa9bc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-06-19T04:15:48.518374Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__96.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__96.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1175\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LezTGo3tfeT0Sa2a3Rt1QYtKwLrFXuHh9xK60gwfcfty%2FxI3Hnwh%2BIFK7HH6k8XAs1AZ%2BMmiwPWKFN1UE0TJwguMSkPH94f7RNrlFQ%3D%3D\"}]}\r\ncf-ray: 9866727ab9d376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-06-19T04:15:48.32584Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__208.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__208.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2574\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbztDPpIEVJL6bq3X9ewmOkUODI21w5vdnK89bTVkRAWzpuIuF%2BxAryrTaY9ug96HnuFb02m2UjOy%2FEDVU6e1hzTmeXy30SaemB0SA%3D%3D\"}]}\r\ncf-ray: 9866727b3a4f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-06-19T04:15:48.567361Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__22.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__22.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1082\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zp7qyDzF2yFnz5V0Lw6G1Bj3h9GVWtVNWCF4OiQAI6kc1tjUbkYXn9F8UR5%2F1IPi6e%2B5psqTRZ%2F5u7CJUt7tBaQWlNvWUlhPTLeNTg%3D%3D\"}]}\r\ncf-ray: 9866727a698576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-06-19T04:15:48.518374Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__51.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__51.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1127\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSjbrPmBn6f%2FmZ2MBsGnOtOp4JWO9lwqHqR4%2BVBhwA7UZ6XNpnFReIQBA5Yrje5dPpxrXSsuKpKCUTpHIyWB4Dk%2BOkuISfkjqnYkGw%3D%3D\"}]}\r\ncf-ray: 9866727a99a576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-06-19T04:15:48.328648Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__54.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__54.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y5zFkLlukHVlqOq1hGlkiWYaBz4MBS9%2B165MBykFazrnuDQsZL9SKjCiN7HiXdcPGiTYrHSTDdCGjFgKB9wDq3TRJlwVqxq90MWeuQ%3D%3D\"}]}\r\ncf-ray: 9866727a99a876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-06-19T04:15:48.295262Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__165.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__165.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2519\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2H%2Fu39kDvWcV42zbunOWfnU54K7K785mEi523CIgTnnRvPVI1rzMRNtrRIG9SdkP11GxOIWscRNChLaWsyBhkggtscB8jDYGhHLyhA%3D%3D\"}]}\r\ncf-ray: 9866727afa1e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-06-19T04:15:48.27377Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__188.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__188.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2459\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XRWKfjF8MPRXAISTXHmw3iupgperFhbeYdNQHIjS809gSx1QO5gZTSaCvOHxGV5ZK8xw9CBg%2FP6nTr3jseb0U%2BYJbIyVONLmjpANlQ%3D%3D\"}]}\r\ncf-ray: 9866727b2a3576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-06-19T04:15:48.502202Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/lvdian.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/lvdian.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 377\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rB1CJtvJofumaEi97tmK6GPv5EGOilzOM%2FR7ZQUnKwUVYSd1ehVTir4vx%2FUO6xNzTmlJgU31Ukm4J5aQmnU3fR%2BoO4K4YCczoLOUw%3D%3D\"}]}\r\ncf-ray: 98667279e95176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 17 x 18, 8-bit/color RGBA, non-interlaced","md5":"ca65390238888d192830dea8c7a01b76","sha1":"f75c18924701177f871ae98aef82f678e485f916","sha256":"e4f579f689379ca1e85152e53d2acc34cd964aee3a553cb87282a0c3f7f7bd0a","sha512":"726a4994019116c881ffeb4ded234990bde64a4ac3b0ef9d0e6caa93ecb97a685613d50f831eec9935f765a5b555a55b8ce81d1c17e7089e20dc25676d8b6a7b","ssdeep":"","tlshash":"f6e0c0d3671ca1bde5c25136ee160c45251fe3cc4223de91a863bc65d230de029942d7","first_seen":"2024-12-06T22:27:57.043117Z","last_seen":"2026-07-12T20:24:56.455288Z","times_seen":167,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/ETH.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/ETH.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 5130\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWyTTlREpXtFv9KjFGNL7UdWPA0UW9YX0IhS67HRzwLPKMDgjT9d%2FnXwxXGlPonbBbOOPx%2FMiXah5K6pT4HIbE7DuklKFVIg5gid%2FQ%3D%3D\"}]}\r\ncf-ray: 9866727a095b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5130,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 141 x 137, 8-bit colormap, non-interlaced","md5":"f8eddb7276c4edb97e56cd39fca25a0a","sha1":"36f391244d5c673fa5283873192fc9fc04d3b3b4","sha256":"6e77a07dd211da688784069afc432e62aef7613dcafb50608669ad59acfcf8a0","sha512":"a61a80abc4e49b47baf3f5e0405e912b6d940a9d35648933b9a5854464b29fe7b6737488a24c30eb812414f1df54d4debf660f819f070dbef724baa46a78d8b0","ssdeep":"96:tUcdk0k5UMW5mxde6N4AKjP9UgHYH+LY+NchLEAnV71a6lGz:tbdvp5mJSAKjPSX+LY+gR7Qz","tlshash":"46b18d9b62e9b8c23e383f5fa2c0fc54c362e561787c62810ad1a65d64087d88362d9e","first_seen":"2024-12-06T22:27:57.051306Z","last_seen":"2026-07-12T20:24:56.417253Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoshangguang.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoshangguang.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2385\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwi%2F1M6xb13olPeHA3HZzNzvNISZKmwbXP0E4rcl0%2Br0x8iDBE132RIdULqxo1uuv18ZoyfLVt1vq2t5Kd0bfG2TJqm8k1WsYq7r3Q%3D%3D\"}]}\r\ncf-ray: 9866727a396b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2385,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 219 x 134, 8-bit colormap, non-interlaced","md5":"c09c80f27f03e0af5ef4d8c1cb71ac34","sha1":"175cbbab84c13f8d870012c9b5b43bde3dc6d870","sha256":"5e58c88cf547d41e4c3720aaa61dfef8e9cd6212ccd1a486f3ccc75d0d2bf2bd","sha512":"a3ac3849f8acf8587d332159989dad0064c1d0c0a57620d0e6e7e904c77a8eafb3dfdffdbbec28ef2a828df13d9ff9c0a04c40706d791ccc1dcbc33d3286afd7","ssdeep":"","tlshash":"404119a273690099da5f122e9b59fc627d1041479ecca0fb9d0f45b35fb3309f18a148","first_seen":"2024-12-06T22:27:57.06904Z","last_seen":"2026-07-12T20:24:56.383287Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__157.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__157.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EHKaPnKrJWHDlrMk4vj3PERJGvw857mKcH97zSDZws7Vfbn3AK5ge7BV8PJ2r%2BoMCyHz3eC7aqjcG0oh%2FvY0DUC%2FDrCSN0oih5anlA%3D%3D\"}]}\r\ncf-ray: 9866727afa1576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-06-19T04:15:48.505364Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/coins/SOL.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/coins/SOL.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 404\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXfE6EHasJl1CU0aDhIGC1%2Fkl%2BcjsxozwDTqgyCc3rDNxN%2B0PwphOJNwYx4bpzwGVvfrTQp01SxeBXp6PdZz%2FfppGHznNWR2Cs76iQ%3D%3D\"}]}\r\ncf-ray: 98667276790676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-13T07:21:16.843058Z","times_seen":995,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/js/main.js?v=5","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/js/main.js?v=5 HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wweKoJxBr1Q8VBkmXIU9cO7cGIaVJPeDvT1GuLTBd64i1R6wA5rBaAZJoViB53%2B4ehaDezAREO25qsOF2KNzVB9O64j%2FIIYU8La0iQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 98667276791476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21541,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (430), with CRLF line terminators","md5":"6409d98ed3cbf6db97d351f0423f42f7","sha1":"6052163324873f34d80ddb789c07a279013e9394","sha256":"ea0d7e711fb8baa35e5c6483f6e339b3c92b4f6f01877ec4fc659594e43a26c8","sha512":"f3ef128d5c31b477f5bb3c7ef3da3a103e74323e7d87b7f64f6c8c6e37e930cdae90b52b4bee1370779e9505a51d72ea1eff3627e7cbbf32f2816c1ce9dbe9b7","ssdeep":"384:GXKlo7s8RElXRnwlWsjdKjHYc4NtZYK7roO:GXKlo7s8RElXRnwlWYd0Qr","tlshash":"4ba28298b22129aa813b7379be775646fb380027d341d349bd6c1de11fb2480d993f6e","first_seen":"2025-02-15T17:58:10.504157Z","last_seen":"2026-06-19T04:15:48.652548Z","times_seen":120,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__78.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__78.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1165\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VaxVfLimiwUdMhgHf0ps7l9tGn%2FnlgJK3fbJv8jZo29NjbC3GJT5gWfP50AIwGSyLZwq9UxHu7iPVON7jmK8xwYoJHuQ2ewFVuu71w%3D%3D\"}]}\r\ncf-ray: 9866727aa9c076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-06-19T04:15:48.340596Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__26.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__26.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1165\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DPo0OsCqOg8XjjyUVgOiSjKMlTGAUwD2d1g6cQiJ5cmL%2FcX0ckDM8AiNWobzFP%2BA3jKFmaMzuBikLh0WGeQNrSGI9jx3wDw8ROeq0A%3D%3D\"}]}\r\ncf-ray: 9866727a798b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-06-19T04:15:48.340596Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__97.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__97.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1146\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IlYLeLdWyBFF2kD9EhI5awNtwBQfV70zUVyNm05ncoJs4lVxFbJuHv%2Bv0UJNYAihEBl1nYdO%2FNeCZcsNouzhRSwfHN0S59jjaYJxPw%3D%3D\"}]}\r\ncf-ray: 9866727ab9d476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-06-19T04:15:48.287275Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__128.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__128.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2501\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Kk7aYXXry5LPobuu1aMjIN92rxq537WO4fk5gnKna0f2iqO1ilLseS%2FiDHiAYN%2BSHlQ42zWCz4Zzewz%2F3LukIj2FuWx1cKLj6hRHQ%3D%3D\"}]}\r\ncf-ray: 9866727ad9f776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-06-19T04:15:48.607614Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__176.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__176.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqm9BCGYf%2BPbSlqFMQsmF5V1ZLAc36gEnqAL%2BUcpauKTWnZ7fS7Ukc9tPs%2BFRNIkONegN1GLn0KDIlvlO03SPzIHussc4Bek4S5Ekg%3D%3D\"}]}\r\ncf-ray: 9866727b0a2876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-06-19T04:15:48.374388Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__179.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__179.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2530\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ky4qn%2B6vsIgOrZacjQ7xn%2Fg%2F3FDlbVq8sG8xHPBDAn3crMfbitYnZaftAKVlvtzTAQWsVFxbx3v5LRXpfoABGdSHnled%2FHIynJdUFA%3D%3D\"}]}\r\ncf-ray: 9866727b0a2b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-06-19T04:15:48.460234Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1264\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: bdf95dc5-b849-45ee-945c-7f2eeb4612ee\r\nx-mbx-used-weight: 158\r\nx-mbx-used-weight-1m: 158\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 8Ws6SqmJYG1Ne-ahV_cO14lNWb1Ys5sWLtBePRb2LheCZXf1trlsAQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4162,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b8fc61e2a2e0be1b4516a8f2a690bdc6","sha1":"fb07f7f65599eeccd45528de074097c21df59cbf","sha256":"890b77515e05c089489aa74773977f98070d0bc7a8c680bf11ef1ad39f978c69","sha512":"48dce6a370c21cbe52808dcae78f06137a46e6fbdfbc45fb25c743a8906b3fd733738f6c2c1f24be8cb65ef46d76edb489baf884963cf18bf55f11ecde100088","ssdeep":"96:mQBqQ5uK3ZujqQVbUHh4g8yvIvBYGXUlBfkbmDXDuZ6oOi3YDEdxqZ/L5y:m9guK3ZuTbQ4g8ywvBvXUlBfcmDXDuZL","tlshash":"0c811771228453b4fd7d8d0a23d1faa59df6301beeda1dc099d1e73748e22b14e48b46","first_seen":"2025-09-28T21:49:23.788813Z","last_seen":"2025-09-28T21:49:23.788813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__27.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__27.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1129\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4iMGq0%2F5tuNiYI2KgzkP%2Bj207pZj%2ByW0HuIgqaboXBQbYKsL94aqhKRgJfIe4reEOZqNKWCFUKOzr0TBwZDkymRKZfGrcxeGhe39ug%3D%3D\"}]}\r\ncf-ray: 9866727a798c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-06-19T04:15:48.405996Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__114.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__114.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2530\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gM8%2FuofCOZe3gL5j4iX4j5mfb56IUZS4t%2BoiTrJoYXcKrb163%2Fnd6m14E0uVB2QRV8iWJhx8A0nAWSfgQ1f%2BSGBqi66D6cB4qPWyeA%3D%3D\"}]}\r\ncf-ray: 9866727ac9e876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-06-19T04:15:48.460234Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/lottie-web/5.12.2/lottie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 63677\r\ncf-ray: 98667276880256b9-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659c9856-f8bd\"\r\nlast-modified: Tue, 09 Jan 2024 01:50:30 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 323696\r\nexpires: Fri, 18 Sep 2026 21:48:49 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jZk5K1KG5K6ULJWxaf5xxbANhKsSZKkV0sgRjHCHrf1hnrfCCzoAJbX0NHZw7KV2QRH6%2F%2F31209N7a%2BIAGE2%2BZardg05NXz4wtz%2FY0vbW%2B8iVJpSn%2BKV6Tn6QM1w8HyMaeLNGeiP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305543,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-07-13T07:00:23.595661Z","times_seen":2215,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":5,"dns":0,"connect":2,"send":0,"wait":12,"receive":2,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__62.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__62.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1117\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FOqlZ8aw10p3BOYllgZT3zCq4tSF9ZXnqel9ENTNEm0L2hpOb7fVVhVCQnhuMILpqsaPEuQCkbk6u3kedS3QFnj%2F39ZxP9zlZbxsIw%3D%3D\"}]}\r\ncf-ray: 9866727aa9b076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-06-19T04:15:48.29825Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__113.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__113.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2519\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRkCewl3WgyB3h7CIEM4M2qOmASk6JOLRQ95MQOw1csUgxBQSD0d2x4RCFS8hiwGC8hTSJhtUt4ubkT6T%2FFb5fkoxaEvNGnJGwKkYQ%3D%3D\"}]}\r\ncf-ray: 9866727ac9e676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-06-19T04:15:48.27377Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__183.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__183.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFWR0aHhcA3o%2BGeDFGm8nsDXMr8MyVheKjk5x5AyIK3zYGTBQl6lSt%2FBd90icFqaOObeyEUke9wZxcdXrGBoYSpV%2BdPKDDKFx1k7WQ%3D%3D\"}]}\r\ncf-ray: 9866727b1a3076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-06-19T04:15:48.505364Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__136.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__136.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2459\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3%2Bd28pMQMf3yAqhFyREXNjm2KrQMSmqL99GpGYFSpbPbcQfKxAKcfBP6kBlI1ANE48g9qnjI%2BOQm8d309Q7QxYu6DPFfR0ed4oW5g%3D%3D\"}]}\r\ncf-ray: 9866727ada0076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-06-19T04:15:48.502202Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__163.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__163.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YaApgOdZyTeLayHx1pbTdPM1ElFV6YYpBMpNpqw2eOMhsG1oulpcGVFW2nLTnjfCP1wGSBpzACcBJof0nElJYcpSx5ZQzJI3jkQK%2Bg%3D%3D\"}]}\r\ncf-ray: 9866727afa1b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-06-19T04:15:48.374388Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__200.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__200.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2543\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XtODlenNtcvwZm7LHJ%2FeCILbaOUnOWNZGNs4BAU3JWhcoBLgoKoDcpesAddsZFSzm%2BRDegVEJAPOA2Bd45GyWs0NhuC2VhSdNnouxA%3D%3D\"}]}\r\ncf-ray: 9866727b2a4176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-06-19T04:15:48.419701Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__209.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__209.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2574\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WmdF2nvYq5ylaP53My8v2Zwli4o%2FIZBaVzRUV4HFjMjv4GzQ47mwOVAT%2FWknrqaI9QaGTVHRL%2FzaRyWvS4Vq2nyVDY7qo2aPUHvdg%3D%3D\"}]}\r\ncf-ray: 9866727b3a5076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-06-19T04:15:48.567361Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__153.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__153.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2530\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTDFVY2qVrFN7IZW%2BQ1wGv4JOPqdMdjRlA2x02KEPBGUvkRFU2PlDcCMtuLre04ZYPYJ7DIg7X5Y80lIxI6abQhRvCFdUshY2E%2Bkvg%3D%3D\"}]}\r\ncf-ray: 9866727aea1176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-06-19T04:15:48.460234Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/arrow-down.svg","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/arrow-down.svg HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yMQWij1VvpL3LrilxsSFnYLo%2BNx8kyuAsaggrjyCAhojtRhaMkEMHb1wFIgykCwv%2BZ3HVdFlYsyfwwPqUztMEVimvxo2NwZTD0n%2Ftg%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 98667276791176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d0be16ce06ea0a66b8c8be201c88f71a","sha1":"03afb7918db67625b2365659d303a057071773eb","sha256":"3e6f14737272b9e9e4b60048aea76d784d99ed190878112b91f2cfba0c6fc77c","sha512":"c26291f4c90c6fe57adfcd466577789d483352812391a587011e19e0e8bf111230722309775ae62ef605ce3ef8bc7efe533b18eef7fbfea696f60205f169c245","ssdeep":"","tlshash":"19d0a79841d84d2ce6664650d7783664f03e10735f894188ea52713ed51a6cd6c339ec","first_seen":"2024-12-06T22:27:57.083257Z","last_seen":"2026-06-26T12:09:20.875072Z","times_seen":438,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1258\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 3b4cc68d-0a2f-47cd-8b39-a742422cbd72\r\nx-mbx-used-weight: 144\r\nx-mbx-used-weight-1m: 144\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: jk2cb54id84pMxujUNWL1l43xjuMLAv64ZdjOLNAkDPKR4FkD74IkQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4095,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2067fc75764001a1d70e003847603d64","sha1":"2e1858ec0560f3ab825ae78ea45a0ecabb1b95df","sha256":"bbcb2ef8d010d066af86898d6bebd950d4f3ad226d0730bad1029ecd91aff214","sha512":"b66fdcf8f31e4d49ddd6271196b35849ef36b26cdc35694871b9220318d68fba564ca465605224d8bc97c420daaaed8ceb1b8fab77e0cd9642bae82f79125749","ssdeep":"","tlshash":"4481f7a5e358c7edfe794d1d2391bdd7096a305aadca1ec0dbd1a73308f22b20648716","first_seen":"2025-09-28T21:49:21.273661Z","last_seen":"2025-09-28T21:49:23.82052Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__36.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__36.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1117\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=39ho4TsCazqMv6DlUSoNoHAxS%2F3765F%2BF54edfMvyXd5yKbQZoPQIoDnpuhk0GFt9V2UvGAPXEQQ4rPHAZFt4oIcIgVRYswGouYxCw%3D%3D\"}]}\r\ncf-ray: 9866727a899576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-06-19T04:15:48.29825Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__116.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__116.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2574\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUfzntViTOY23Ee7zEqCNnaocVe%2B8TpNwLjS1lioWOgL%2Faf5WJ89%2FjdoS53aXtMeABgMhIFpwXeLKp3rhieqtaVknprzuJKN%2BZulyw%3D%3D\"}]}\r\ncf-ray: 9866727ac9ea76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-06-19T04:15:48.567361Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__118.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__118.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPQn7vO3z96F%2FylAybq71touXDemxVuEpSSlxpHayBY2g9gYniEESDzNFr1bnvG33r1X2UppV3mi6VJEBPhsG7371MD9Ac402%2FMqyw%3D%3D\"}]}\r\ncf-ray: 9866727ac9ec76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-06-19T04:15:48.505364Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__149.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__149.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2459\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YonUyj5Ao1SO5li2EAg6l9NjeiIf6x4bO5hhlIvDk325dpV4XE6%2BzTo3DSERETeUCDvwvZh9WST8W8%2B2UtsIj9U4sPp2OySGuXFd%2BA%3D%3D\"}]}\r\ncf-ray: 9866727aea0d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-06-19T04:15:48.502202Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 23:17:32 GMT\r\nexpires: Tue, 22 Sep 2026 23:17:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 513077\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-13T23:29:20.716033Z","times_seen":924072,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__89.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__89.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IJECaS%2B6kWTQhB8wnGLPaQZk5OSzGAvmInmLQxYVF6gtPeWezrlvkEcDe%2B0pR5exgVpj5Lo%2Fx2UpzHwlyNg2RzlXzJL1AIvXMd6OCg%3D%3D\"}]}\r\ncf-ray: 9866727ab9cc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-06-19T04:15:48.348198Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__177.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__177.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2496\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h2syuLO1wlqFm2CE%2F3P%2BDm3v4amNDljm8caDB%2BUq5z2mALgl%2FpGGiqgUbLdEWQVLlo2aPShSFzAh79rkuphqNx0e9%2BvN%2FjE3PpqU3w%3D%3D\"}]}\r\ncf-ray: 9866727b0a2976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-06-19T04:15:48.463131Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/chart.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 71652\r\ncf-ray: 98667276eae256b7-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"32dd5-Z992c4Z/9fKU6qjx8etYybhr1nM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230145-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 21938\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PknHqoKBdUOGY3V5SmA7snGPKgCNWjEJeORRbX0kn%2Fck0LbCyzqhLKgK7h3mn2ge8VckZyyqqFE9kJNrJLX26DcPBeIwUHnGdXgNRH1XpC3e80%2F%2FyNPvfRXK0FuB4nBg9JU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208341,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56990)","md5":"187ffe7a12d1079ea1653198f9e19187","sha1":"67df7673867ff5f294eaa8f1f1eb58c9b86bd673","sha256":"2f27bcf471b2d69dd78494f6e2172fb28470eb843820e2f96bb85d39f9618d30","sha512":"639d67f66b4a4d5061dc96f1e6965224d0c333263ec867bbec31ad04fcd1960b1ffd82c2875de4499dc999f1c6cd814298e9ddada7f4b1081f33ae786fb749df","ssdeep":"6144:ry28GjjkD/6w7tKuhSGmexa2FiKqUN1eFRQ1Tomkb0T3N+2HJ8l/mXI:2akD/6w74uhSGmexa2FiB8eFRQ1TomC3","tlshash":"3314f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","first_seen":"2025-06-15T09:44:43.237994Z","last_seen":"2026-07-12T21:33:56.440007Z","times_seen":885,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":61,"dns":1,"connect":2,"send":0,"wait":13,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__3.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__3.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1093\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkTG%2FsfW5Nufeo67U1%2BweXIPyrzJOzf2oFWg6DGP4oXdE4N5iKBTbUWT7JuwU2yPZgRfwgy0eZeNu7wzwWz832QDIs9OXrwFtC9JpQ%3D%3D\"}]}\r\ncf-ray: 9866727a497276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-06-19T04:15:48.337333Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__174.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__174.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2543\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K81RrOUKSlzG0PgEG%2BpH0N9S2C1eWRE7sp9rtcdY67hyRSUcnKNZ8JUnNMeHljeDsmoIW1pyGW2Tz0hDnbneimVvCDxOu3CQ3Frc%2Fg%3D%3D\"}]}\r\ncf-ray: 9866727b0a2676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-06-19T04:15:48.419701Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__210.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__210.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2574\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ydz%2F98Fi9ogrvoaJxs5rbG9XA%2F8sVBkq%2BvY7EptGdc14cHQNCEFyI0wUXCPleSkeeJwN%2FepowS3Ger6A52YzFKk1vGogQFM%2Bcopc9w%3D%3D\"}]}\r\ncf-ray: 9866727b3a5276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-06-19T04:15:48.567361Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__42.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__42.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1093\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6%2FwDLOHBN%2FmF2w0lwdFj8HBXZSHKeEl0AyQVMjB4t0OLXMYHX9ZUB8Grq0Q6YgnGPvQEs%2F8NsdFRzuuR534eNjqLvpk6e%2FbMkpEVA%3D%3D\"}]}\r\ncf-ray: 9866727a899b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-06-19T04:15:48.337333Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__48.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__48.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1082\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMQd5FZZRzweUAVsTkcqUPIeB%2FYpO8mzekRWA5JObpVaNGEIpdUFetlV3sVHwt%2B2iKdYos2ogukZp9W2XEfzCrHlIzP1zbogb%2F2zvQ%3D%3D\"}]}\r\ncf-ray: 9866727a99a176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-06-19T04:15:48.518374Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__76.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__76.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTn8FF71RTcDbgymk6OzBfUkEXaWL%2BkL%2FeZyxQPPEtB5C6DYu02iEJ3U3FWPsb%2FyfI4iTecHwjsAdlaGoTiM%2FmL9O8wD9CzPSsl%2FlA%3D%3D\"}]}\r\ncf-ray: 9866727aa9be76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-06-19T04:15:48.348198Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__190.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__190.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2496\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2BNTOgXUzF%2BqHKJGhH453I%2BvMQ3Inq5bY%2Bc3yXpOsj42msyFlg%2BpQznuXjOQ4RJwrgs7%2B3MLTTID7wXLCgW7A2F7uyaZ1VTzHKSUuA%3D%3D\"}]}\r\ncf-ray: 9866727b2a3776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-06-19T04:15:48.463131Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/baidian.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/baidian.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 223\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdIcrf2saR8YiSsSPBEwXR26uHrau573evhDcohzzyoojMiOYczUw0U5q5ebEy12z4F%2F1iUHSZSaacquoQKYRTLwGTWt11AyjGYV4g%3D%3D\"}]}\r\ncf-ray: 98667279e95476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 8 x 9, 8-bit/color RGBA, non-interlaced","md5":"8c449751fd1ba616788193704f52ee90","sha1":"04e9f5111ddcdd679bb7513f8f41d643105721e4","sha256":"bf1bd6fc635dcbfafd5a1426fec6e8490bc8e2e854ad3201c0d0f897a4716a28","sha512":"9a1e9f4e8f99f24282ce016b2f659b4811f5642d62aada575846f0f59d8fb5846b43d3fbf0e7f5e86725c6d36b33fa32072c1cb60668471862ba8a3adf3f8deb","ssdeep":"","tlshash":"dfd023c02741edecd1ab30b3d3088c454033e1d092300c04ac864c2a0ca43d04349089","first_seen":"2024-12-06T22:27:57.038265Z","last_seen":"2026-07-12T20:24:56.453282Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__94.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__94.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1093\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1TRkXZcddrHugY4Vg0Jm67fpXLAwjeJMf7P4cBLww8wl7RTaMvdUqGe38H7C2RUZZxXwxbH89ZM3cB2XiPBBxwVbFvetsYtQOMW4g%3D%3D\"}]}\r\ncf-ray: 9866727ab9d176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-06-19T04:15:48.337333Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__107.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__107.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2452\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rF2SDC6uasxPmwVF9B3Z31vEyvJPNgFXMa09gnLuCGVs5zgzfCTjEDbIfnrz49FNfRTNTAtgCVrmtXDcRDR0akFRO1h%2B9ptw0VNXKg%3D%3D\"}]}\r\ncf-ray: 9866727ac9e076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-06-19T04:15:48.303255Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youtai.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youtai.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 13595\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=snPPJl0ra6B%2Frqo72UZxz106td1c%2BnUJeZezKL9oV5kgeUWs8ucxa4A4LajN%2FBUKn7TTjoj%2BjWeyfBOmImwzdn9pJACaSfYL66pNVg%3D%3D\"}]}\r\ncf-ray: 9866727a296776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13595,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 275 x 252, 8-bit colormap, non-interlaced","md5":"daf784f4211b3754e96c325ba9cf4fa4","sha1":"c59505665d2856881316beac7b2c71a3000ab2d7","sha256":"a8aa32ff5b9767b36f4ec5eca725c0cdcf561a30d77421a86cca0d2be3e10723","sha512":"1e4f74036dc4aeb68e9f2283f01c9049ffde68be20eb80ca237d8d5ed40e9c134290999ae94deff0d0a8a9a30c9a9e92d47b621381068b558c5f4b7a6ad97602","ssdeep":"384:1zJhmUk777hj7vcserVy7omZBM7oUO01bivUXbpt:FDkbhjohy7omZKoUD","tlshash":"0652c0843c794660b6aa42404185ec409693ef3abed37ee1c9eeef73ac04c64016cf70","first_seen":"2024-12-06T22:27:57.070032Z","last_seen":"2026-07-12T20:24:56.473569Z","times_seen":167,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__40.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__40.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1129\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2F%2FvRKEHgAKPCCk329je3oCw2CBwVbA7fyEM7MiFZtqkOYvpAuJ7C%2BzfXxhrDmhY1oEPVmsLWHnYU7LzKpD%2FDK5yyuclH%2BXXRVuCzA%3D%3D\"}]}\r\ncf-ray: 9866727a899976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-06-19T04:15:48.405996Z","times_seen":156,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__86.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__86.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1085\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBQdFadWUty1VO7Z6LynDe1mMqcFC4eD7GRK2lcLUYyoNRr8rFU2T%2Ftuij2V12LuO%2FjEICuZCaLBdZM9zJZWM3gDE%2F2um5H0zcGDYg%3D%3D\"}]}\r\ncf-ray: 9866727ab9c976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-06-19T04:15:48.292299Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__87.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__87.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1082\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1iHt5P7Xq2%2BZpaQ%2BvjKkAdzfFDNEd0jgI4knbmYERoXg6A%2FwrSHiTGoLZCiW3Io1LG1DbZVNm8%2BgVvUd%2BvDY9BhAWuelmrSnUpAqA%3D%3D\"}]}\r\ncf-ray: 9866727ab9cb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-06-19T04:15:48.518374Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__135.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__135.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2543\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4vvNMWb524Brez42AY%2B1ZEFF4p3u%2BRbCESJpRFEpeubFZjVwhCCsMRw3ekrP6kxgHTZHKadnoNH99eYXd0pi%2Bg%2F%2FredfAHHilBr2A%3D%3D\"}]}\r\ncf-ray: 9866727ad9ff76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-06-19T04:15:48.419701Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__164.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__164.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2496\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRQDlbMqlV6HOYoTf6FDJnsi9PZxe5slK9%2BjXyDL3WZ%2BxHFar1RsLsdnOcUDuZfRuwpl%2FSo0%2B3hU5RPPu%2FAEyulM5ParDelFaYasfw%3D%3D\"}]}\r\ncf-ray: 9866727afa1c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-06-19T04:15:48.463131Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__196.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__196.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0uuY9UnsC32v7LnaJNbb4HPcf06FaPxMOt2qHc6JrrC8%2B%2Fm074s22nu98XjuVykgTxP7d0VLLgWf%2FJhFLIzUt7D9O%2F6OdnHVoGuNA%3D%3D\"}]}\r\ncf-ray: 9866727b2a3d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-06-19T04:15:48.505364Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/dundi.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/dundi.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 7244\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pjhvdcWexRVGm01gXKmQV3k2bbLNgG%2BuAVfxdwbY%2BcQmnCODqX%2BD%2Bwa617%2BGOxfGU1Keg18kI8kA2fsYexZkQHeRRoZ3js5SPN9YGw%3D%3D\"}]}\r\ncf-ray: 9866727a095d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7244,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 332 x 417, 8-bit colormap, non-interlaced","md5":"3d7c48c3a8bf8921455b31e95715b568","sha1":"271ea3f8da2b2456b9f5e2d60a97de720f4b81d5","sha256":"3b42c3fa696ebebd10727ce85eca02a29bed7f2ca7d84a14c3affcedbf1214b1","sha512":"4250a2ea294bc157974aa7ed38c3f8e339cd3241d32f826321b857b8485da511e2308e02990460468edb100fe84c952eb1c5d1e1670c9c43b6f155092a1c5575","ssdeep":"192:4DUGW+8HStLcmVutTBoOYzz5Pf+fLbpSO/h:qA+82wautWhzdfSLkKh","tlshash":"ebe18e69490bbc748a534da1191f7ad6f02d9ae03f3f97d2a240a0a4a5170f6cff190e","first_seen":"2024-12-06T22:27:57.047883Z","last_seen":"2026-07-12T20:24:56.480442Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__56.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__56.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1128\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UoaxXhpcc%2FCJYW2%2FC2IRcBncNiQJxgc5SN5UTmFw2u317eeykWTGO7R%2BPAeUvez%2FuFai0U023kgJ0asdZkZheMiM3oFODNZ6fixfbg%3D%3D\"}]}\r\ncf-ray: 9866727a99aa76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-06-19T04:15:48.370678Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__82.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__82.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1128\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AwBdpM6RvqykKTKfY92%2FF7pxwPQ8Ag5B%2BSoy2Wtir6TIi43PyOvVFioSw77I4WUR%2B2vsZ%2FQqp5MMqy24UPM4axlWXbrl%2BfkM5u%2FXWw%3D%3D\"}]}\r\ncf-ray: 9866727ab9c476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-06-19T04:15:48.370678Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__119.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__119.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2379\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqujAst5N8TxmJWnI27wP7q6CgKhofekxf77YqcA6Zrf9AORwyu%2FHOofTb2TqTp2z7YoLSafSRLDXY0IyY9SuehuzoTgK44xQ4uyhA%3D%3D\"}]}\r\ncf-ray: 9866727ac9ed76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-06-19T04:15:48.549093Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__131.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__131.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bqkea7hW4WAM3ba1WVkOMqCHhiu5c6dQrcUDcNdeYtvgcQouCp%2FJrC9IpwsmleoE9kTxOv5VaWUCC4qUpigkLdnNOI%2FC5dd1b5GL6A%3D%3D\"}]}\r\ncf-ray: 9866727ad9fb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-06-19T04:15:48.505364Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__206.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__206.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2501\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2bw0R%2F%2BGjUVgVyFph71fQL%2FmO7jHK31nMMVc4LFIh6LW0GmpOenT64eYNFk4q7uQCSIY3lAn1kQWYr0OXkcCoYS6Y0VN%2BXmDorx8A%3D%3D\"}]}\r\ncf-ray: 9866727b3a4d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-06-19T04:15:48.607614Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__185.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__185.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2452\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gWZqQOUl80Rj7feOYyc51hh4nkMzjWpYqr0Q6wdFtO3raWB7%2BnjxKPW5z77mRdqowSkF2RuRNkb%2FAuGVPlJAJb8RCZ98%2B9nyGzklg%3D%3D\"}]}\r\ncf-ray: 9866727b1a3276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-06-19T04:15:48.303255Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/support-logo-chat.svg","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/support-logo-chat.svg HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdmIuvtki8Fc3ZVWMqk6GSJVBN0USufAa0gCiPLFDKTPit%2Fgpjx2e8rXW6s%2BStisQWHan1a1w7khi5vzBP3Yvpq3p%2FtXSiWAz5LStA%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 98667276791076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1834,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"911003c9a49f882d73fe4c40511816f8","sha1":"240e8d2f0cf44da1b1cf801a1e3eab472d081e34","sha256":"1192299763868ea940054d1bb7529b95620f02490f8f42aba8590a9df6d394b8","sha512":"e1221ebb601b7d8723f7d84c6e9c91aff64ffbc75d66ff89dba9f4499c1c8ef0f09e9819a00573c8302b295228c40cee0f306b92ebdf8522a41ea6156ea1236f","ssdeep":"","tlshash":"363124f9f7edb5d4f91887d0539a56b07b5b21fa7623c50807d21ea0f24162e04a988d","first_seen":"2025-05-02T21:59:25.084344Z","last_seen":"2026-06-26T12:09:20.864078Z","times_seen":436,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__24.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__24.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bv72leWz2OuuAq1lKMDxMCP5bTGBnjxOy1Au7qftIhNUZYMP5YR0zFUKHMTJiYwkFhdLWP8C3f7OC9OaVjYLJcmaVwqs8vDm%2B472Hg%3D%3D\"}]}\r\ncf-ray: 9866727a698776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-06-19T04:15:48.348198Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__64.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__64.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1127\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRUh4ENt6H4GDdLUw9mk8JvUd%2BjM7MYGM8jKqjv0SpSEfwNb0WoKN4xyONT%2BqiNos4duzv9klm3j7%2BQlzxNaSOYnCSx3TPNgudCn5w%3D%3D\"}]}\r\ncf-ray: 9866727aa9b276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-06-19T04:15:48.328648Z","times_seen":156,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__140.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__140.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2530\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cMx7HVSzkFg0LZiAqIZ62JmBxagA900fApaSQRuFAFUsneRD6Cvzq3jVN3PTYaIbQyJIRgwmgUiKjNshFC9LRDhyKfQHW9nW2nX%2BQ%3D%3D\"}]}\r\ncf-ray: 9866727ada0476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-06-19T04:15:48.460234Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__156.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__156.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2605\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FySjDBNYXDiY8kwL0j8tsIVRkesYYesdyOfaUKDcoKJnexQ8OeJa3CAZQyx6fSzyf5xkgkSyQHN5jtsob%2Fg6Dck2UARUbPCuSpwLSQ%3D%3D\"}]}\r\ncf-ray: 9866727afa1476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-06-19T04:15:48.411522Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__175.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__175.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2459\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FJ6RidD4g5f4eC0ZEaW%2F%2BliwhdtTP402hCTnSTYL3D7nWI4T0hvCxdnrRt6Lh5qhDW2cOguwh0CX4G5oTQKqqOgTn9f%2BHmfePrCnDQ%3D%3D\"}]}\r\ncf-ray: 9866727b0a2776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-06-19T04:15:48.502202Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/coins/DOGE.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/coins/DOGE.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2808\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nReskgnb6dYH9dr84cnuEoFxtFGUncqZ20%2Foe4wQAoW17ssstHEy8gfLMpOLeI109ZdUC6MtVdWMB444klVkHYKsFOgpKj8xVszgIg%3D%3D\"}]}\r\ncf-ray: 98667276790976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-07-12T18:01:04.349418Z","times_seen":955,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/why-we-2.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/why-we-2.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 11063\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WabXNbao3nOgwsDWiLthknPkYKHQN6B5xnZbKI%2BxP8fBwvvgaV0a%2BkDyfMqLwpTQON3blxKZDo9qu%2BXrgHtuLU1yBj7sd6EN70TKyA%3D%3D\"}]}\r\ncf-ray: 98667276790c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11063,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 436 x 378, 8-bit colormap, non-interlaced","md5":"708c0dfea5f5feaed5501b01c1c0f387","sha1":"0658f5cc13ae4f972913e0066986a3e0b5d472d4","sha256":"53332df3792420c1a7dfd18854330dc2033f1dd49f3d3659f315263d3b3162d8","sha512":"62e5c13672221ef5bdfeeef22da135915d905a288b576ae038b12297abd9ae02616a5bee9abd01db53d73ad4a277a64fd28a5561bd346cbd276fc52cd4ee3015","ssdeep":"192:6SmLsOmhczgfRDepWKH0VyqqvWT5olZx/27acRBjstxJCgtAsxBHjuf/Ia6S:16mh7f+WKSqvWTqlLGjszQjsHHy7","tlshash":"0532afb0591530410d9a7487e9b6e11f674b2e8c788a27073a4d7c6bed3b0a23f1ad0c","first_seen":"2024-12-06T22:27:57.020644Z","last_seen":"2026-07-12T20:24:56.449361Z","times_seen":178,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/untitled-app-modal.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/untitled-app-modal.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 9947\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pNFPbM%2FmIeKnxFyl%2FBX4DL7LKjaNxPdlCEOE999z2PWdkdAsW3anGBNaxt2ZRzzrNcfe%2FtGnhGpPz0Nw%2BXKg1DEfQ9I%2Fu1RbzYa3Qg%3D%3D\"}]}\r\ncf-ray: 98667276791276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9947,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 345 x 252, 8-bit colormap, non-interlaced","md5":"5559668af3e553fc871a55adf3347819","sha1":"4a699964c855c8f83c2610de0af2419a71257c8c","sha256":"8ac5dfb6306149a3edebaf77bc100de9ffa8af46e56b8bc79716fc701e207617","sha512":"e0edab55aac4f8d743e98bbb7d52ed7c5b1f5b32c84e8cc271015c10d57333c2b458f30b4eb5e41e0c7e91b02dd46a8cf30b9653a3e932949413f85021485967","ssdeep":"96:JHrmqk0gW4mwLtat2J2wx1Q4Hs3NGlGzribeTnSodQNDirGQ0rNpV6x/ddcEoSa8:JHrmqk6QoqeTSoao4pVCdHahAob+8RLE","tlshash":"3b225ba49f9578c0975e1e73b5e5004548330ae7cdc2bd4abdce542a0f28b819f2b9d7","first_seen":"2024-12-06T22:27:57.026807Z","last_seen":"2026-06-26T12:09:20.867644Z","times_seen":396,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__67.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__67.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bLFDtZ0sKETPhCHON493D3sAAAo38I962MVq3oCNDN%2F2D7MdYbEqeFBH3%2F%2F2z3gtOjGQpiv2rEzU5tno27xXavjJORqlpPDCf6xbDg%3D%3D\"}]}\r\ncf-ray: 9866727aa9b576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-06-19T04:15:48.295262Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__155.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__155.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2574\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XLhzqd5bVoA5XPLCcjlcCPVrcOZ1vOwV3i4m58THx%2FC6HrilUBCa2Ref7QvtEzkZbtAB3GQ6YHW5i%2BHKyML0my8tijab0TrFTqhJVw%3D%3D\"}]}\r\ncf-ray: 9866727afa1376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-06-19T04:15:48.567361Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__198.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__198.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2452\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FatB17PxahaSHsyiFvLCbm4IEuKzDn6i7Rq8Zrd5XICGJ9mTbkcrIW1ZZ5L2vqhwBK%2FP5sOsW2yyorNPuJieKGLI%2B%2BOsKkURsa7HUg%3D%3D\"}]}\r\ncf-ray: 9866727b2a3f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-06-19T04:15:48.303255Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__130.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__130.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2605\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6lHNqX2grGkJONF84NWrwTdxJkEYMtdj5l6FWNOcsP5tjLm8JTbC0SYBZ%2FSBIMX04Dv2AtmG9fAxdry29yBdP88Olr8nLlVnvA%2Fdw%3D%3D\"}]}\r\ncf-ray: 9866727ad9fa76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-06-19T04:15:48.411522Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/domain_icons/4_1758991012225.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /domain_icons/4_1758991012225.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 18689\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Sat, 27 Sep 2025 16:36:52 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 198\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XiBuGJOkhk0Blm8SzyQo6%2BsEF1V%2B1%2FgUWHJIiaAlioUf8QKrdOvALjiB9EptyrLGTcjugA7lxTNkO2RfdbX57Yx0%2FvyM7iSRetLoZg%3D%3D\"}]}\r\ncf-ray: 9866727c6a6676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18689,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"fcca4dc4f7ea6aa4af78ca0e55d31b78","sha1":"a29f2ed784c7c23fd5d96d34914594ed552a18b4","sha256":"227399ca2b5eaf5805dc110a60341864a0dd265c1a033b1ed5b34642b8e737ab","sha512":"8f4e975a4d0034be3319018f412dd85cc4c06d95158d9cd22fef245db02f0723e32ccd87a86d401cee47a91f773f29dc8c9ce03245450477faa4e522f0dcaaae","ssdeep":"384:kWLMFRQZlibpQETQ8EUyVx1qJM5u1BnvM7Ps2JJ+iqg/z5:NqQa1U8iLqJM5uvM7Ps2Jdqgr5","tlshash":"2682d057c2202b59f95b5a84e43a969e90bf2c05c96c0d1d784ac87b7f9307c4f48aea","first_seen":"2025-09-28T21:49:23.842273Z","last_seen":"2026-02-08T00:44:33.377365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/coins/TON.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/coins/TON.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 24181\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3w9N8Nf7HnElO6FVs5vjEOKxULx7Kpd7pMfUjLkGHahQTTP%2FrUQcktGk2I3VG5vCKJBoJMBE%2B%2BSYpPjpCq%2F%2FhBOv3WqGR6s%2B6dSxdg%3D%3D\"}]}\r\ncf-ray: 98667276790a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24181,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1e864e18e2e3a14b3407889b0e7fb1d4","sha1":"6498cdc01f17a9c51007bedb1eed9e28ef98bd90","sha256":"d8ffe78edcfb9ad030ef0f932ea5a25c89acab7c11d6cf03b32cd4913de14053","sha512":"5b0555db16debaafbad44fb6e10cd8f3ee414c8bd272ba47734fcdb44b32a5828cc0776c43dfea0c40c81d9718ebbee8d9f3fbfca17f08a5e45e193cb9497f31","ssdeep":"384:WU5AJju7MoJSV2L783TGNX2H3PLIE0eq8x343eNZCPkArJTMUno/JBWRCrasz5Px:/AA7MoUV2P83TGNGH3PLIE0t8+ONYP4F","tlshash":"40b2e128d57e8291b694f1b827cb5c8f0f738cd23c711e50ee550ea0a7922651cefa0e","first_seen":"2024-12-04T15:05:15.931067Z","last_seen":"2026-07-12T18:01:04.321043Z","times_seen":475,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zhongguang.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zhongguang.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 12444\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y45HsL4Rpci37Txtu1vnOfk%2BocJrtxGPEtR79gVaeAJrHxgpY8evnSh%2BQSojcM6%2BHDIipkss97JoyGjMwon%2F%2BnY8OlhwZkxBEgENOQ%3D%3D\"}]}\r\ncf-ray: 98667279f95676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12444,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 347 x 581, 8-bit colormap, non-interlaced","md5":"1d21e5ef041a609160189913f734e545","sha1":"e4d77c8609e7dd8d0fd31564207b5a4353860a0b","sha256":"4988ae4013e24211d8f8545998ca7dd06bf0b3abcecc28003400a0714dcf8dec","sha512":"6596fa833230734b93801cc6bfda6d582e9b7f4a7712adccebffa3e02f063a916324aa3b666c4260ec4000fc8511fa347de32fb474b6b51ba8a6ca0c22f96ee4","ssdeep":"192:TYCtCJ1J5qmh4Ojon/+0Oxxz7I/A1DT6eRzDJAfhBspbvYVmfrKstWVUACnh:TUJ1JhbemDxXI/A1RzYh+rOsYVAh","tlshash":"8242bf5c9af15b332ff9a9a0649750634683e4284284be477601af7e91ace814d1ecbb","first_seen":"2024-12-06T22:27:57.049002Z","last_seen":"2026-07-12T20:24:56.509282Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__29.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__29.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1093\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ow4g0xmHiLxV0cLi6w0mh8hkeMf1JjGt1Be%2BWcvvbYwFWTUlvNaBxI2q%2FrDMQE1sq0RKw%2FRKSt2R6giTukiswMfyPv5zvr2PryUW%2BQ%3D%3D\"}]}\r\ncf-ray: 9866727a798e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-06-19T04:15:48.337333Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__65.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__65.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1165\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JzTu9JgJg6gKIYJKN8Le%2BNjGAjS%2FeCoul3thJK%2B4zjmTOXGUPkFtzN3vK%2FqC1A6SKjeZRelFi5%2BH21n%2FHu5wVrKaGV1vYdLXKl23Ow%3D%3D\"}]}\r\ncf-ray: 9866727aa9b376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-06-19T04:15:48.340596Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__112.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__112.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2496\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSfLrNHL0Y0bsHzcnLSmFIdMzc%2FSAuG9E%2FnsqorwK8jmosaauDjwjSsWjwb9y3oIr2nuhXUbW%2BAmU6TmCm7OrLVegpacP3D%2Bx%2F5hmA%3D%3D\"}]}\r\ncf-ray: 9866727ac9e576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-06-19T04:15:48.463131Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__122.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__122.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2543\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcNE8Tih18n8O5MVh%2BwjvpHm%2F1ZlCG3t1iTKC0r3GNN4s%2FbUCI%2BLYbs0%2BnE1qWTfC6UTSvFNkF9YKws3n%2Fw9%2FPoIQcKXcIqSe34iWw%3D%3D\"}]}\r\ncf-ray: 9866727ac9f176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-06-19T04:15:48.419701Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__187.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__187.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2543\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0wSOgmqqfR3TSM%2B%2BxjsVIO%2FH7xohugfR5kdgbTMycIhg2Ia7vmsOnU8e0RqUJVF3j3dUAKfEmq%2BarpymlK3H1hDY5IaduwtWq%2BtdQ%3D%3D\"}]}\r\ncf-ray: 9866727b2a3476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-06-19T04:15:48.419701Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoguang.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoguang.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 3491\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kv8s3EqXAwhtBEhDb5a0mBknBe5u%2FVvE%2FQGsJvWOAeWA7FlXxxQpH%2BfmoNcTu0aYLDvXfKXoGunYZdm0uU7H7sfxw70R1NIO1ODyVw%3D%3D\"}]}\r\ncf-ray: 98667279f95576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3491,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 178 x 452, 8-bit colormap, non-interlaced","md5":"d73f747dc379a6cbcc92a4ef2dc52b01","sha1":"4d941406fc8f2c5dbf537d49dd3320ce52fc3eef","sha256":"925fa78562dfeef68f5d9fcd677a42c62001446fffc4939f20917e5dbe7b6cac","sha512":"c8526b42c067bb2ffceafc189c617bc7b75a04eedb5de2452c221b62574222fd0632a2693473a6db5fc881b111ff4973070c0e47c8bacf0bfe0b15984ae71283","ssdeep":"","tlshash":"52713bbb0a604eb2c81fd3b91126e26cb5079494aee9d1a3d6482817f4f754be7e3181","first_seen":"2024-12-06T22:27:57.044226Z","last_seen":"2026-07-12T20:24:56.518861Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/BTC.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/BTC.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 7122\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lx90v85GxpM3KEM7a36GIhYzTLBdsFhEdhX1NraKo6O8emKPoJILbNV00jr0xcpyX%2Bdp%2Bz90w8J3HGLIvysuDHOcL%2BxB0VTT2CJQpg%3D%3D\"}]}\r\ncf-ray: 9866727a196576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7122,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 185, 8-bit colormap, non-interlaced","md5":"cecbb351de59a5af2dd64ee1299ad34b","sha1":"5524394b0c2f7604d0dcc14ab2a5e3e470b42194","sha256":"3a94aa67a5302869e077021fef84bec9736c0cfbd48f8d2eacfd2c51ec1b6c1c","sha512":"749962900acf32a49c5cf47fa1ec587c6d0e672f46f5ef81c55ddd1367813356b1a059472bdf4c44a06bf11943337ea66a849b8b03b66f3daf9f006fefb6db2e","ssdeep":"192:iKTkA5cplyH7KGt7RKsKLziZ99hqn9i/PMG:cScpkb/KsKv099hRPMG","tlshash":"dbe1afc75b0f3c145d3409a55bc90fb5fc802417dcb4b77b96ba9ccab1d5195e158603","first_seen":"2024-12-06T22:27:57.060463Z","last_seen":"2026-07-12T20:24:56.421549Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__25.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__25.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1127\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHOZ9N3P%2B7tx9mdsvfyC8%2FsJLGQZtL6koxJ7ZY4gkoWVSj2HvO3%2BVVE0RtF5hpWZd51K5IIh449%2FPDcDrJvgn0rpVtqy%2FSEDd9iT1g%3D%3D\"}]}\r\ncf-ray: 9866727a798a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-06-19T04:15:48.328648Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__126.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__126.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2519\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JI5ls7x0UCs0VOGIW6DTtbfqMKpFtiguy%2B5C6k0whgWJZhw%2FDc8LL1gsscBieKe%2FbgztUc2EhoxhADKW8p1mHrNDj6WDyTnydEKT2g%3D%3D\"}]}\r\ncf-ray: 9866727ad9f476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-06-19T04:15:48.27377Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 42396\r\ncf-ray: 9866727688d356a5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"658b77e4-a59c\"\r\nlast-modified: Wed, 27 Dec 2023 01:03:32 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 322856\r\nexpires: Fri, 18 Sep 2026 21:48:49 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=63R5mPdcImvOr4OYKjmwRGLimCjPRzM2UGwUPfS3zoBf3rO%2B7VHM94UBUbR8v4A2D5RgYN4cPWPY7Q3HCo3TOA1xhfX1JcnrtH6N2zrSO3Kd%2Be0bcZxIBG7NcR8kJoJ7jVZJgUCG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":346626,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2c83c4bce691e18f82409f87b2bf84e4","sha1":"3958d951f073022975e50de0c711a17bfa1b703f","sha256":"03fe3caba05e65b14e4035139eee89b12be87cd0bcf342ac3886770eec3a9962","sha512":"fe4eb9f06e94b02bdb906441def3d7a6c3c781679db89c225863c2192d78210c37c69afadc010c740f273181b68266245e2b50c434e7ea288aff67c3e13f3ba8","ssdeep":"3072:LRA3YkpX8O2wOBZuRVOh01y7xBqlaOznO3oDmCleSI5B1H3n/ZdhI97:LRAI64wN89BqZnODweSgH3n/hIB","tlshash":"b5742de5d04d24e3f733c85fd740b798458bf2b2d6690e05f68b660d09cba221687f6a","first_seen":"2023-12-27T17:19:29Z","last_seen":"2026-07-13T17:58:53.516272Z","times_seen":6068,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":5,"dns":0,"connect":1,"send":0,"wait":13,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youhuan.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youhuan.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 3658\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ohRsnfb0U59uHbI4wxhJI%2FocWnzttP5E8yv%2F3s1VHvPTLQmxF3cz4P402Rmna4h4F6WN3JuENiVrQw9ESJyL8SmVjLeWkznV0%2F4eg%3D%3D\"}]}\r\ncf-ray: 9866727a296676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3658,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 238 x 138, 8-bit/color RGBA, non-interlaced","md5":"eb42fdf9633376a853fa85bf12834bc6","sha1":"3908cd7954b6e61e1237097d3e5f121e7af43846","sha256":"1887f08507cc2c7d1e6d3ac5f777be5f615d8693b96079c21071470d0c6de70c","sha512":"9cb777a63db5f7eafc8dc010564e36ffc188326dbd40c833b076b50327636386248a1a7e301e4c61bc91a99b3af8b49f5bbde237786ac64fe59e5525a122ced8","ssdeep":"","tlshash":"7e716e9e2974bbfeda8ee30e417fdaca5c41c454057928fc0042ddd47a65cc1605174d","first_seen":"2024-12-06T22:27:57.058217Z","last_seen":"2026-07-12T20:24:56.50758Z","times_seen":167,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__7.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__7.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1076\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NeP%2Fh1RG4DgrH6pKXw984BYFFQeVnc7NCGdxANOzs%2F4QjlNJ%2F32GYQmLqyQQ%2FIIMSud40CUmH74igennWKK83JDKknyUUH0IIwqmkw%3D%3D\"}]}\r\ncf-ray: 9866727a497676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-06-19T04:15:48.331559Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__92.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__92.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1129\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnXWAIAUoVwyiWzB55L9moSCp6NcPF6t6sRXtQGGSOMFTeb7HIKIgUP2TPDuZcOsaNWVjHf0wfxT0eQPnyz1MbK9EcwVyalINsz7%2Bg%3D%3D\"}]}\r\ncf-ray: 9866727ab9cf76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-06-19T04:15:48.405996Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/coins/TRX.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/coins/TRX.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1315\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBcnEhLNoH%2FFZTsm18QHknEJnOWVtAiSqByol8F7lozluDbZCWbsS64DujPz%2B5j3OI8VkocT8VzqP1Qd6GV0DKA%2Bjmqy9HcWKgZs0A%3D%3D\"}]}\r\ncf-ray: 98667276790b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"79cbcbdfcc32e9ed14054fb9f306d76b","sha1":"d0fe46ecc0664340d7027500d23cb6ee7b8de4f6","sha256":"ac3824adc2a37e25d5e63fe30c4de623c0985730450f3e12b58bcc58677d107d","sha512":"98eb00b634f4214e5d546aff3c51c6e889a337ed9e9a59d96b2dc189bb822352d01d2d53e02db22255c2c3f44836ce30c52c8e22199eca10c8e431d17560cedd","ssdeep":"","tlshash":"1f21f8b87b5d652cc209c890e8364aa77098f9ae0512041e3830ec3dfee098be2567c3","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-07-12T18:01:04.332134Z","times_seen":1073,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__151.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__151.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2496\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTN18HlXUdFw77b2zCCq3Z6C6lL%2BZmcpzFLb8UmQuwu6WlE94yisDaV66ISUias5kj48oDipoqd5KJDE4sHDvEI3jWSXsOvZ2jU04A%3D%3D\"}]}\r\ncf-ray: 9866727aea1076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-06-19T04:15:48.463131Z","times_seen":156,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__49.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__49.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1117\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BtUQP3GvurdWy83Vd0ew0OdFJyhGNvRONEHDbMQeZkj5o1Q1mArdlzbbHmo9xzm1BK5uHB47XwUWT%2BDczm00f4LIeXqT667sdnPX1A%3D%3D\"}]}\r\ncf-ray: 9866727a99a276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-06-19T04:15:48.29825Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__58.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__58.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1146\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WgOOo7Q5uQ5zRn%2BynO3%2Ftv7NgUmBgsbZ%2BM1AptDZc9CBr7jURVJbgSHJicWWJUGY923pX102I%2Bsd%2BKmYg9Z%2BSisnq4iR23vSjU3Fvg%3D%3D\"}]}\r\ncf-ray: 9866727a99ac76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-06-19T04:15:48.287275Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__138.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__138.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2496\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0F00qLKTnxSNO27UMwRBfDw3imsTVLsUj5Em2e6yGTEr5aCYTvzGRtWnlGyknqTJubNLnsL7E2sbDxuBggEC2CRFFEkdPew62mQZ0g%3D%3D\"}]}\r\ncf-ray: 9866727ada0276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-06-19T04:15:48.463131Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__154.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__154.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2501\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EvNambW6XmxuVRMUsFOKcbVLjpR2UAgZ52Z0vRXtP1N5CNU0z8xhRAxDPc4TXhCQNqoPiq2Wdz%2FM1RBlpH6mp48CJQBXw1G8xDH6UA%3D%3D\"}]}\r\ncf-ray: 9866727aea1276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-06-19T04:15:48.607614Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/domain_icons/4_1758991012225.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /domain_icons/4_1758991012225.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 18689\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Sat, 27 Sep 2025 16:36:52 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QvTRZcSgwVUStt7gG8jBtTo1Y3R0sVHyMoxs9LdiyeCg9mHX79zOc%2Fo%2BWDI8MsYtsrRAkXNGCttj2U4tcINQjpdOn482kYpm5FdHhQ%3D%3D\"}]}\r\ncf-ray: 9866727668fc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18689,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"fcca4dc4f7ea6aa4af78ca0e55d31b78","sha1":"a29f2ed784c7c23fd5d96d34914594ed552a18b4","sha256":"227399ca2b5eaf5805dc110a60341864a0dd265c1a033b1ed5b34642b8e737ab","sha512":"8f4e975a4d0034be3319018f412dd85cc4c06d95158d9cd22fef245db02f0723e32ccd87a86d401cee47a91f773f29dc8c9ce03245450477faa4e522f0dcaaae","ssdeep":"384:kWLMFRQZlibpQETQ8EUyVx1qJM5u1BnvM7Ps2JJ+iqg/z5:NqQa1U8iLqJM5uvM7Ps2Jdqgr5","tlshash":"2682d057c2202b59f95b5a84e43a969e90bf2c05c96c0d1d784ac87b7f9307c4f48aea","first_seen":"2025-09-28T21:49:23.842273Z","last_seen":"2026-02-08T00:44:33.377365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__20.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__20.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1076\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoHkRDL4uBe8DSILKIe09TcDmyzAGgsnHZ4iWk%2BlDdSxwpigLVjXjamyMVsIkKCYlNseK7XLDUm7g4yPyKn80VECf5cclUxaLJ9Spw%3D%3D\"}]}\r\ncf-ray: 9866727a698376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-06-19T04:15:48.331559Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__55.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__55.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1093\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8RbCsoygR28GoiR9YNAvVPeAnGSRR9FWw4Sz7NEiJKKdyNs%2B8zOHQTncdPUb9q1flf1eYMKC4ObQplRHaEWhlyYQzsoSsZLa1NbIw%3D%3D\"}]}\r\ncf-ray: 9866727a99a976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-06-19T04:15:48.337333Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__57.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__57.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1175\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoDrhl63c1%2FQs2epdS2xEumgdUlUvws8WYPjOV2e33QRPKah%2B85QUPaUIr8vNMxg5DgwrMrUUHQ0lw3YN39JyF7X3tu7wj5c0rPSJA%3D%3D\"}]}\r\ncf-ray: 9866727a99ab76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-06-19T04:15:48.32584Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__83.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__83.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1175\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9k5DbfFXZ5mMJPfDWRDiwvbm%2Ba9qlzzUOTLwogpGMwJx2rKvhQzhcRBrLK5amGYpvnwglUUW9eCcm3JUuTGkclAkYlDmsnw4g5jcpQ%3D%3D\"}]}\r\ncf-ray: 9866727ab9c676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-06-19T04:15:48.32584Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__127.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__127.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2530\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7dEUo8xTGI5kdWMD5zVqwpDG%2F7VBTjhSL4TODcdwyCP%2B3AfRyYkhlUFI6Rij%2B8EMfg974AySWzgMpckKIgB6uyzrJM3L2sgJPnTgw%3D%3D\"}]}\r\ncf-ray: 9866727ad9f676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-06-19T04:15:48.460234Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/trading-right-away.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/trading-right-away.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 4425\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6lSJqoCfPhRJTXpKx2I9%2F4ykrs4LPXjMTucfXvPMztETL%2B%2FTj%2FIxijA8HzxfachUpXKCMNqB4f8yYuPTPO3EM%2BJmEncoYUJ3NC2drQ%3D%3D\"}]}\r\ncf-ray: 98667277b92b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4425,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 233 x 150, 8-bit/color RGBA, non-interlaced","md5":"ec223dbdbc5af64f78247e5fbfb0ca8d","sha1":"648b60b14d3bdc24c473fa6fdad342b6b6403369","sha256":"80f9867a4fcbbc41bd985ebd713482688d5b06439a6d5e21d38f6142238c444f","sha512":"34496e4e1addc636bc678746a42fe6fe023d84f8a5544874546d1607c561789edc04ece27f236eaa0c36820f3bf02f306c7bfe77470773b40cbd7d4af3e4c8ee","ssdeep":"96:9/iCjPBfewk87CM8QKTR7H88qDyyWwEc4EMfXbfRI3e6s7eZKqItjg2U:ZHRF8t70yyWwEc2aO6QctsTU","tlshash":"76917d153414fa9aa13c0fd91630e3152a678745de9ca7087cc7798d337bb1ac953647","first_seen":"2024-10-18T13:48:19.499029Z","last_seen":"2026-07-12T20:24:56.45223Z","times_seen":180,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__23.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__23.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1117\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1c%2FcjBq9KwY5F4ey1s%2FQQcb5mFZ5zt0gLkyi2GBq3AcXqhkIaTMmONK9aSWapRPWOkp%2FdXisPyAmlqsxRJ4ztpJqlCUN79ZN9oJYA%3D%3D\"}]}\r\ncf-ray: 9866727a698676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-06-19T04:15:48.29825Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__125.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__125.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2496\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FDuf1WiHgG%2F2fa0%2BiaF9Y2GfYWA6hGzseqmy9JaDvBAVP5p1ODM7aLfuEiKmsG3dzJJABQgfuR8bA6JjWiCnd6IHxzAhCBq%2F8u9uFg%3D%3D\"}]}\r\ncf-ray: 9866727ad9f576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-06-19T04:15:48.463131Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__129.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__129.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2574\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cutM8wr1buXt87BjwSBYlPN7p%2F5kEnyTGwVrTlDseAakurb11lc4HtKw733cb7Sk7UnY53pR2py%2F3KPisK9j5Anwe9kjfk%2FR3EwRIw%3D%3D\"}]}\r\ncf-ray: 9866727ad9f976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-06-19T04:15:48.567361Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuohuan1.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuohuan1.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 4528\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5S%2FKmSukrzV4AOypZpt%2FY9lryj8%2BNoN%2BayUSL0xpdOVwOB%2F1SMGw3QT5z5JNDizldeqwdsWl6jB1wjLhmK1JfcTeiXiZCOgM7HXq7g%3D%3D\"}]}\r\ncf-ray: 98667279f95976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 295 x 155, 8-bit/color RGBA, non-interlaced","md5":"176861f481d652d0b30df6ad1f9c1748","sha1":"76ed7a16a35a925797d57ab6af4a7164be7af457","sha256":"abeb5d931b0b1e48def3ca1f6e61fe26a24e103c77eefe4c45ceaa106e51cc01","sha512":"027f3742436ea256471adf2f095e072acb6c684fe99f1fe3fbcd2742be3903283cca76eaa05022602c90e20a3633eb26596de46ee2f0bc17c3eab705d28a5937","ssdeep":"96:0G7igL3xjxPrn2KWfw5DxxrLRISYq0HRgCekR1zVp+Zo:0G7/L3xdRWI5DxxrLj0HJewzVZ","tlshash":"8e918edec3bf5c1e2e0974750f0a554d4e79bbc9876f097cdd488227d8f4064668d988","first_seen":"2024-12-06T22:27:57.046532Z","last_seen":"2026-07-12T20:24:56.464664Z","times_seen":167,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zhongtai.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zhongtai.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 25955\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOd%2FIJgUwWYCA6PSKC9QC3GnaxzYwyvlsgwArd%2FO8Tl6ixLE1ZLUtXv%2FfCK%2BgY64HKPx0%2Fha7C2bPCf6hyL3UrBjo1BkgooBWcPJbg%3D%3D\"}]}\r\ncf-ray: 9866727a396a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25955,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 456 x 388, 8-bit colormap, non-interlaced","md5":"6601552cdb4ce9b6f34c2e2d28639179","sha1":"f9f8743306c57bae37b5bfd0a141f1384c73baae","sha256":"adcd90b13f160f8a0d4371e8512b73c370ff8623c8a3069efe159a50c03586c6","sha512":"34612da3b6834f927aeb6fbbd5656251a494fcb9cc5665c987edf9d8ad1cb5832b11e8df13d4efc9473da273759b0b3b2cf131209ca43a51c05e409c74c3504e","ssdeep":"768:W6umfBxtuWaGw6pcgRGWEDS4r6Wu3H47YMCb8YccFGW:hHBxkuwu1RGWf8x7W","tlshash":"9ac2e0233521893e5f32315f4875236f927bfda48241a248c707ed9969f79b0b4315ee","first_seen":"2024-12-06T22:27:57.067016Z","last_seen":"2026-07-12T20:24:56.418202Z","times_seen":167,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105_.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105_.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1127\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OKw09q5NvXxtg9Ry6XwfNWRIpmj7XvP27ZYymvkvgvbcqOXYIiHMXwrnTCNT0lptFnPO4onDIThNm2PUBWEaCTBNkXTBxPO3S%2FEcgA%3D%3D\"}]}\r\ncf-ray: 9866727a396d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-06-19T04:15:48.328648Z","times_seen":156,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__37.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__37.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2FlNgO25PAmisx%2FAuO%2Bio%2F%2BvvVeQLK5EeE06zazdn%2FrAhDev9vigI5OyrvySs0PvKxdhXhXnUnT3wRTnDJKg%2Ba58zDVChHfi6AHx7Q%3D%3D\"}]}\r\ncf-ray: 9866727a899676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-06-19T04:15:48.348198Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__124.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__124.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSEmDXMKMihfFTbRkLRQMT%2BEw1A2unliBxzgpyaNUfzUMk4kXIwpQzani%2BkpQZ9EON8uaeEkiyxChIc%2FNtv8gRcfGE%2FTGgvuTTT%2FeQ%3D%3D\"}]}\r\ncf-ray: 9866727ad9f376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-06-19T04:15:48.374388Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__145.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__145.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2379\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fHQiCRh1KRmsVHr3HPfxMeCy9bFR91vBlXcSsxJ%2Bl2ZG3oc7U9wO1uK8H5yFsoDKid9w0nGQY46g3rUe2Gkxsd22eLZVmu7GGUZgQg%3D%3D\"}]}\r\ncf-ray: 9866727aea0976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-06-19T04:15:48.549093Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__192.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__192.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2530\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xE2%2BUZX7uYrHOXWkYi3CGTSQjFync9b2yFU0%2BJN5XW9Asf0Jp82OjSYXaDpZqJcvrpYhIDFLpg%2Bdj5PiVsBmg2W733tf06tnjPw4jw%3D%3D\"}]}\r\ncf-ray: 9866727b2a3976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-06-19T04:15:48.460234Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__144.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__144.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O8DSX1QKyE9ItUWZg7XnKeF5SDa5NHirIsE%2BTRASqk1V6cnd9bbHKBLj1bn5KHlDR2HKUgcepDxbdj0tS183Qu7fIgVB7II45WMV%2Bw%3D%3D\"}]}\r\ncf-ray: 9866727aea0876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-06-19T04:15:48.505364Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__172.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__172.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2452\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWZbTn3UBD6YCeeSXFYcRjlhRtPINHbbM9LoYLVIaUzaGF%2F8tdcux6wPZEblRaaUiQp63h0tXbvTGaER6Q9m1SCkVeCjaVDW0uSt1A%3D%3D\"}]}\r\ncf-ray: 9866727b0a2476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-06-19T04:15:48.303255Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/header/technical-analysis.svg","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/header/technical-analysis.svg HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRqf50n3csBjUc%2FcRFXYwCautALVSEbeko3smrDG2Jqycq2LqOD%2FdHTjJAx4mq3cAwr%2BuccfXfjyf1eauFgVRjBt0%2FTTfnVbjPPstQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 98667276790176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5032,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"392721e78e0013c0fa96cc574ec5063e","sha1":"45bb4f8eef034d061eae888b3b759f8890d82961","sha256":"e98843f36f8117977e9a636e6d29b9f0ed94e6ed93bbb492d3413dedd8db25e2","sha512":"33707ce4e4feace0dccd38422ee937c42ecc55f80f80148f922fc0d81c1965cfd3a19452eecd3e7ef4e423ed7ec6d3fb3858d9f025dd8e3b648a79a1c2e9900d","ssdeep":"96:+kUAfxrpn/Ilg7arcU7pV7M3qIkLmzKGhsmnJR3UDDVod96:3Ugxr6qOoq0KGXkDhoH6","tlshash":"0ca1728b033cc2f877c86428a9713542367264bf5678a108f3bff8263747f662259d58","first_seen":"2024-12-06T22:27:57.056845Z","last_seen":"2026-07-12T20:24:56.481782Z","times_seen":268,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1215\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: f595ea8a-200f-49fe-8c89-2c70c7ffb5c2\r\nx-mbx-used-weight: 150\r\nx-mbx-used-weight-1m: 150\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 2yfNyrDXTII0l6L_RiDaIT1dsXulwa-i-QlTZAV_5o2i0H_sQulnrg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4068,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c12d5e56ba92bfe0f5e2189cadfea63a","sha1":"68c0889ba2cd7337b4cf0e764621d7a4bfc5feef","sha256":"6e773d063d2d565a5bdab62ba56817960b3c379284a929983eb03ffc56164d0d","sha512":"66fcb1c169383323636d45eaf6667b001eb4a7b295f2978504b503011013b6f95528c4edbdf24ba70f58dc23f4271b3003543e94c972a74204b9d49654cedb75","ssdeep":"","tlshash":"31813992179087b1fa7d091d23e5f9665a6a700fadcd1fc0c8e9a23318f12fa1708f55","first_seen":"2025-09-28T21:49:23.875276Z","last_seen":"2025-09-28T21:49:23.875276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1111\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 1fe7398e-209d-42f7-a849-7cd1bd7be652\r\nx-mbx-used-weight: 160\r\nx-mbx-used-weight-1m: 160\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: RzcQf11thZRJth0AAf0oZIBidJinPOCk5_ARTl46eqxGwT273ltPpg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3877,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d0cb6d9d128b1622a71464c45a5ffb3f","sha1":"3ee7d89c7ecb0e1d86e9faaf95ffb831fc14aad6","sha256":"05eafd787447ead04c0f78bee88cac9f949524f246278cb9bc8e1e2a38ee4ca4","sha512":"f8ff7a047c3ecfc7a5b19a40f480239130c7c7c8eef3b6c29fa43c9f1a9ba82fcdc371450289093a78929bda5982ed668a629b99985a45d7cd726c922218855b","ssdeep":"","tlshash":"ae81b26113948360fe794d196391fc56197f30daaeca2fc489a1eb330ce32b21759f52","first_seen":"2025-09-28T21:49:23.878404Z","last_seen":"2025-09-28T21:49:23.878404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__66.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__66.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1129\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YnQLYPqcUmd53Ex3rMQkzSBa4kAa4IdERwbZCTWVT%2BRE18rOUKq%2FExeoyVY7yhbhvyFr9xiLh4svZMjBY5cdfcNBtZl6a4SJPO2gFg%3D%3D\"}]}\r\ncf-ray: 9866727aa9b476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-06-19T04:15:48.405996Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__75.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__75.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1117\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3b6%2B1VJtDcR%2BQEPIYAQHf%2Bv74d85ULerYx94hiHESOZVh4%2FWE08WYaLg3%2BJayLYl7GEF75Pt3TIt5hy7hlOxflmp3CCIC97bS%2Facg%3D%3D\"}]}\r\ncf-ray: 9866727aa9bd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-06-19T04:15:48.29825Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__199.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__199.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2532\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0mgCjlwUVPrQHXN4PFfhsHzGk7bQVWwg%2B4wYUZgKxHUOfyDFxr6PCjv3DKAeKGka%2BSn6EK1CounpZ%2FXp9IwDnhmWG8Pdj9WvxK1Vg%3D%3D\"}]}\r\ncf-ray: 9866727b2a4076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-06-19T04:15:48.657646Z","times_seen":156,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__202.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__202.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdJJwAN13WH696Y%2ByM51Al8sbU7wi0XyR%2BJwbTUP7N8ELxg681igBnBzNL1foJQDR7WGbYiL%2BQsWDKCEan8moPyVp0wGlrq%2Bl9ah7Q%3D%3D\"}]}\r\ncf-ray: 9866727b2a4376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-06-19T04:15:48.374388Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__170.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__170.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZfGam82ThjCCgxKZwurjybiHULpNvit9Y9DQXL%2BxTL%2B87Qm0ZawyxlpfsBbKtkFEUKke56RBw7BZRHeGEUD%2BV2O4v4ADGapRENaqOA%3D%3D\"}]}\r\ncf-ray: 9866727afa2276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-06-19T04:15:48.505364Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__182.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__182.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2605\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q69OPhARqDuQBp17l%2FezSAxBp3RG3MFrZjkzMSH93Z75Z6Tbw58%2BbzCwHYPRorCp%2FPXF171TsM%2FOfPqCBV97WcSjBsl0K685QXWo%2BQ%3D%3D\"}]}\r\ncf-ray: 9866727b1a2f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-06-19T04:15:48.411522Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/header/card.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/header/card.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 4528\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0iu1qfD9qcXIzsNQ3JhVpZpLIYQLYzyDiTwPOL3qINYozjfXu%2BTG1lcmqOadxAQXmxffW6Ek9d6DMGpF%2BWT0P6Pvb6xHaDZoWb3rA%3D%3D\"}]}\r\ncf-ray: 98667276790276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"787d17f49cc145d078cec3f38989b144","sha1":"8bb854fe7462d3ddc152b958232a952888a14c3f","sha256":"c38f9a1f91724365b80b233a5ddc5b891216bf82bb05f7be521fc2e75bd3cf37","sha512":"8ab4bb5374d3d7133892ba81959d0a0cf9c3adc05328d644b2ef326e602907c6988dd9b1588cb18e595583458628e130943ed8b53d70d13dde7c03fcde4f6ed1","ssdeep":"48:+MvnJralQqxKPbGf3k0IJN5IloAhat2wxrYCrW3ETb92jw1M:ZvnJWlHAjck0IJ7Ifat2wpYkbb92jwm","tlshash":"7891cc06da5235c1664ea9b711d503596c334153cdc19c5cb4cd8829af303e91e6ebdf","first_seen":"2025-02-15T17:58:10.483843Z","last_seen":"2026-07-12T20:24:56.482334Z","times_seen":398,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/fonts/inter/Inter-Regular.ttf","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.ttf HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/assets/css/root.css?v=3\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: font/ttf;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y72pY5CnDpwP4NGIkGvWQQh80A9rU3%2Fdxrz5H408qAp1yeAJAolD6YHLs1XF%2BSTmnLn3FGI0FIZwmRSAik4rsvE2zL%2BV8RFhDFjGsw%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 98667277d92e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309828,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I","md5":"079af0e2936ccb99b391ddc0bbb73dcb","sha1":"7237d9cf55f177702066a28a4dde1e4c7e8ab576","sha256":"41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8","sha512":"0dc66e3ea9fe00ebdba8636f563842e4170f21fe3dadd57ba59cab416ca3326dc887332644b0ec47cf0911d7396557beb420908d3e90a5ea7830efc4f0a482fa","ssdeep":"6144:AyKMOMxMmABlNGowmBNn6m4zHkA4atw21za0dkh6w/yOjs:AyKfMxMmABlNGwBNn6m4DkJak0fw/w","tlshash":"88645b23f363c35dc5172d3687e2c7a0b367bc512a12e10af7283a55daab1b41d9b4d4","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-07-13T10:06:47.790922Z","times_seen":4298,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__10.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__10.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1117\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8AbTwnyP7DZQPwLfvvYHt3JDKu9cZCRbg60%2F3ncmya4rQF7Z6V54jlYt38q%2FQz6%2F0RM%2FVPGj%2B1lenEaXLCbZAaG7wpTQHqlSOW0GWQ%3D%3D\"}]}\r\ncf-ray: 9866727a597976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-06-19T04:15:48.29825Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__30.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__30.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1128\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Q9T3YTShMM3XcLL7X%2BTP5LAydd0ZPPQMaWKFwJparxR46FvAYeMeqSwDTiU2efrzl16KAmwRIt26UHSleYKMximVh0HnZq2AmOpOA%3D%3D\"}]}\r\ncf-ray: 9866727a798f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-06-19T04:15:48.370678Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__103.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__103.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64repgfr%2BUawD5ce%2B%2FDM5oBQJ6akjYfIJh03kk88vQzaI7FedtFFYrgGnBXxLe677F7K6afQqrChWl%2F97SAmaYq%2BCz7eBXWm0ZQ2%2Fw%3D%3D\"}]}\r\ncf-ray: 9866727ab9db76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-06-19T04:15:48.348198Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__105.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__105.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZnOjeo6k8Lgf4WD8cN5dVyez7iLL%2B8diVBzz5Vo84l4nzzuUdA6VKvuJXTNnIYFdiXcREecJ4tQngv%2BeLqSnEUL%2FlvloiNc9En3vsQ%3D%3D\"}]}\r\ncf-ray: 9866727ac9de76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-06-19T04:15:48.505364Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__189.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__189.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2521\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLqutqMRa8GVsjDePMmOTQQRd71UZxjFqAm8GXVlCk%2FNcTW%2Fdqa0980gII9wLOx40R7UlpsTgXZRZDENvQnG9McTABMAZ7WcWiR15Q%3D%3D\"}]}\r\ncf-ray: 9866727b2a3676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-06-19T04:15:48.374388Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/animation.json","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/animation.json HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nme5OaX9FX7CYGdpE0RbptMXMoB3XSkskWJloS9Dhu%2FzwZVBv0TJ52VZAVbbUbYHxrMD751E2BmOoBM7iomZ1h4UUKPh3I%2FlJZGFHQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98667278893976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598133,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b20461aaec546f9b8600fc2510c97f39","sha1":"dc4f50ec5de51b91429a2094b888ca2aa6fa1016","sha256":"e5b4bf9d6d251dbe826d992294f0daf8e01979d767ce0d9e66d237096893caa8","sha512":"df6452287bc69c849afd85e63158705916db504caf58ef8e21dae78d9c0947bd0de519f49b62cc8e25fb21bb18eef9ef1da56679d674aef4cfa3edd1ccfac3d5","ssdeep":"768:PmgUORAAM0gAUs2HlZ6Kt/rkgT0Ay9Anf0sfUbgkT+vpEZjB0/VF4gHSJFC0SfTj:ug5PuqYaYsdYv","tlshash":"1bd4e83ac6691cafa93da339a9f99354e5d4536b00d90c077f7c59cc0f7310a0a8ae5e","first_seen":"2025-06-22T10:42:51.770623Z","last_seen":"2026-06-19T04:15:48.526453Z","times_seen":155,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/XRPxia.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/XRPxia.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 4545\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O53k4%2B7EiDqkWzBBzBuBbXnbWNRCNHgs86aQvcSZ0edXyBtF0IML6GVV7LIu5mQvpnSdCOHx%2FVATQbCbz57jIbqocm8MFi2xBDa76A%3D%3D\"}]}\r\ncf-ray: 9866727a196376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4545,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 138 x 85, 8-bit colormap, non-interlaced","md5":"b7a5eeb84e1a6fbd18a6fe2d64379fda","sha1":"a97a665106ced5a59aa89e88dd17d59ee14cec27","sha256":"c1a3fb5afc69e1416afeccb42d7105e4635efeaae53e49b976e5043d6690f8e5","sha512":"04d321903303e07609dfd17933a96004efa3621b79c52c9963a2879c5299a311024de402b2315cf13c3495d1e8d641f1d9bfaad388772f1d05709b40a57fcf04","ssdeep":"96:B1zPyOiIRY67J2w6xkoDeYyfdxDim9G0PI4nWaHAQz:B1zPRiIRYy6aaeYEG0Q4nWwz","tlshash":"2e917c2de589f7d1d74401357f58b0d33c81a32e7b0451a390b14528322a13b998f012","first_seen":"2024-12-06T22:27:57.05937Z","last_seen":"2026-07-12T20:24:56.428167Z","times_seen":167,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__4.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__4.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1128\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2FCkroiTimqVuwOUDkaUnjBlhO65In5TYZIFbBdxs4bDhF%2FRq45pv7jmoPlCGHLM4X3BQGBMLqklygm%2BlxKPiO7BdLsxk7as72zw%2Bw%3D%3D\"}]}\r\ncf-ray: 9866727a497376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-06-19T04:15:48.370678Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__159.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__159.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2452\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2FHQC%2BvyVIdXgFtJeolWBELHBm64YuItnf%2FJuRP%2FXdzmfa%2Bbsr7VNDr%2BGKdiVnrvtrgP6t03cvt4T3XCfYT0%2FYhqksV2GFmHZ914Mw%3D%3D\"}]}\r\ncf-ray: 9866727afa1776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-06-19T04:15:48.303255Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__166.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__166.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2530\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3hY%2Fcpbh%2BvzeMiJ49zpqBTNIps5yPx9BZA5CE%2Frk5saU%2BqE%2FvhVAztlIdBtBCRqnEXTeMCE0msVh8smaXVikoxkgB6mlZOhpq3Qfg%3D%3D\"}]}\r\ncf-ray: 9866727afa1d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-06-19T04:15:48.460234Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__195.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__195.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2605\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IsUiHPwHaxEzeuNjhO0%2FvfVvOR74Tt%2F%2BXbpI0IotJsEpZ2CM8SZciHsSUBWD5E0fvE1YZINUQ%2B4phcyC8MAlq32Y20irk5mnpqVF4w%3D%3D\"}]}\r\ncf-ray: 9866727b2a3b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-06-19T04:15:48.411522Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__2.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__2.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OL2GlxjFAw998J6Ka9ouan3ITX7dyyPwk%2Fes%2Fpd5OWF3O3rZn00voPzPjTkptskh5iFb%2BwS0KlbwSa0%2BJTlbYCluyU8mqGA7jSuxZQ%3D%3D\"}]}\r\ncf-ray: 9866727a497176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-06-19T04:15:48.295262Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__100.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__100.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1082\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQOsC5FiotWZnTFjHuriZvrEnKh65jSnP01JfN7Aymr0bLuqLUigDQQu24d75iqOImlQdW3oJF%2FrZ5Y7hk4PHjy8dWZK5h9JgpT94g%3D%3D\"}]}\r\ncf-ray: 9866727ab9d876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-06-19T04:15:48.518374Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106_.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106_.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2605\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FhMbBCduE4aQ2pBqrXH0F0131AKaiehxsgRomOzo%2Flhe9kGKDIH372NR5V%2FUypzyaL2FZLZpae%2B9U%2BED%2BIVnQ7cf6J2GjrbIJyFpMw%3D%3D\"}]}\r\ncf-ray: 9866727ac9dd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-06-19T04:15:48.411522Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__91.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__91.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1165\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdTl1n%2F2PJbe7Gbo4PV9wNFHfL%2BHs5lQMYZEv7t9OirRww8V3Nh0Q%2F6NznUBkoSHgISiUAGY0zJeDSxRTGZ7H%2BjGsh3DmYh2KyHYsw%3D%3D\"}]}\r\ncf-ray: 9866727ab9ce76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-06-19T04:15:48.340596Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__201.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__201.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2459\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCI1EV0YY%2FL%2F%2FKRHVgnPCTFFhPrVQr1Jsb%2FzKzsgrZzAW2MSRuF%2BeVQzV3LUzx5BV77lbAlHIxKM6LDSeH7s6v6ghGquuvUfY2kwRQ%3D%3D\"}]}\r\ncf-ray: 9866727b2a4276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-06-19T04:15:48.502202Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Sep 2025 21:48:49 GMT\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"d944067e94d0160ff8c77cf3c5ac9535","sha1":"cb28bd222563328dbd407da0f5fcf6e49467d8d9","sha256":"24cd43bf5f5b87c9d829f6b56bff60452811d45d38882a987b6cbe922d4b2ffb","sha512":"cbd9b7b429b60b1f56f35e6208632cc734f1e74eb07c0d1bfdae53e3e08a97e67657c7601866e1fecce4e824edc56eb0475ca004366c058037bc7cd02fde69c0","ssdeep":"768:DDADRDYDKDf4DQLDDDXDfc70afUQRptmJKBLfhQE8YtCR6UfaQ7zfTYHw+fQQVN+:+2Bia0p","tlshash":"5be2eda1041740009b839ce223cebf35fe5f92117141d0b9abfd9b6badcbc66526936d","first_seen":"2025-09-09T03:11:00.629323Z","last_seen":"2025-11-18T22:33:24.583546Z","times_seen":1445,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":125,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__9.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__9.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1082\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=99a5QOALgqGJg8GuVReBMudhyXAmLVJROcuB1kiA6IeYpHMBbx%2Be4bkKOTau4Jx127e0NDVbIsbyzADvzobXZ3O0xbIsoxK%2BLy0BFA%3D%3D\"}]}\r\ncf-ray: 9866727a597876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-06-19T04:15:48.518374Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__41.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__41.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=peadER8a0ZYY3I92DmaJ7st%2FL302%2Bl02LUYu%2FRByhxH5yk7kW7ZKl6NE9hSa6VfUq9yeO8Hi1CovMhgmrxV%2BvdZtgZACTYUjkrP4fA%3D%3D\"}]}\r\ncf-ray: 9866727a899a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-06-19T04:15:48.295262Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__43.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__43.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1128\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYTgH6fzY8djB8Bf%2B6riMvEAx%2FUlTuEGGHAu1nUHJcN3h8MIcO8M5KotmR0Ap5tElPiGHmWW4uyPcks00EJegaaq92x8k3iP6hQcxA%3D%3D\"}]}\r\ncf-ray: 9866727a899c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-06-19T04:15:48.370678Z","times_seen":156,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__60.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__60.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1085\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CjeghTbTorh6T5seHYh2mg9lIP2zOcxx24IBRUcAQ%2FqIsvPhy5dJ3fc5crH1hICz%2Fr%2BPFge0v8IUfmeEL1GwR0jZ%2FO90xozw16bbgw%3D%3D\"}]}\r\ncf-ray: 9866727aa9ae76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-06-19T04:15:48.292299Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__63.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__63.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fq2U4t%2BmfT0imnKoDgXl%2BbjA%2Fd2W0NCJRvmV%2FXbTt76DmUM0ZyLyiDMHnIHKxTjfAzr3Rh24HuJizaa0w07dsEJyPK6pIEyX%2F%2BWiXQ%3D%3D\"}]}\r\ncf-ray: 9866727aa9b176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-06-19T04:15:48.348198Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/img/chat.svg","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/img/chat.svg HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTDR2npL2xqibf6YVPatqY8MuUxKPuHRPQUA4AG3DjT7w67tjIAd4vSJj%2FTgc0iK1yMJYg%2BoqF1DgsmFTy6gyt%2FImFJP2ai1Bs5dkQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\ncf-ray: 98667276790f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1143,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"856a385d230e560529fe4f70a442cea9","sha1":"c9669d3c47705149e26efd24e0d3ed738fc03069","sha256":"c2b05ce3c22fd9b07bc627c2ace70217eb0e3dc2183d9d4aa58bd482dcd8d7d5","sha512":"10308be3d10aa5ea28b1c8a026b6008c530aea11658680ca9b54af0e06e4f7e7d7b1831326d13cc915f83bbc4d1e8b5e67e630a42b8bb898c713875ee3fb2959","ssdeep":"","tlshash":"fd2168e66fec96a6d35e833063f41fa62b4730bdb6408d5f8680dfb0db051aa4144ad8","first_seen":"2025-02-15T17:58:10.491189Z","last_seen":"2026-06-26T12:09:20.847106Z","times_seen":498,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://direxbit.com/\r\nOrigin: https://direxbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1363\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 762cf10f-7952-4a86-8fc5-6035369ffd47\r\nx-mbx-used-weight: 140\r\nx-mbx-used-weight-1m: 140\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: I8CdKFk_8nBFRtsCLDmDXLl6dV8xcf0zsEkwjOclmdloDnzzB2mDJw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4234,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0ecb44dda8d9239c7d364dda866696c5","sha1":"9f6b994f799c84108ffc084be712904fada547db","sha256":"532e75b9c89b5d15bf2109e94f37e748ba0bb5166ae44cb9da5132209cdc3e49","sha512":"0b23decb90a9385e0fe3b7e62978d822cb8b11d67ff55447e6c4b65dd9609d00dc568a5da1924c55b6cba8018b14435ab0973ba4cb7f0611f87a11d164ae6acd","ssdeep":"96:mGX3WeMjPVdhViiOUuqqvNQ6tL8cozPXLHySsqeGP:mj1jPVoiOUuqsNQWLBozDSSPHP","tlshash":"9691253322999360f9798c093791b865096f701feeca1dd08ae1f53758e17f28e78b11","first_seen":"2025-09-28T21:49:23.832428Z","last_seen":"2025-09-28T21:49:23.832428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/huan.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/huan.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 8572\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zd6TpYVDuObO958lURIxhh1nzXUU1qbwNSfn%2BVo0noN%2FL5mBCI82rdn%2FRINeH7%2BR8HqguDrxecGQRESRZaAquPZ7RoQ3fXkTDIkaHw%3D%3D\"}]}\r\ncf-ray: 9866727a095f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8572,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 1186 x 623, 8-bit colormap, non-interlaced","md5":"cc57ed80f628f951d0df6b59fe543188","sha1":"dbc9ffa76ec04396103b8a474fe5975b0c0994e1","sha256":"c34115b0c4968ea674ac63730b14a0275503496a64075d795dedbac2ac0af915","sha512":"90304066517d1a6d4b5bb5fda4258e86dee183d57c8bb14ae6f02d0f194c3e0bd205f363f55a4666e09104a0d31e37f778d621ce7ecb9aa07e4550d64af38f87","ssdeep":"192:mMSw7TY3Qc05tLfmWi5y+8/Ytb6AeoJr1YLmJITzcZ7:mMXYc75i5y+8GGnwr8mJuk","tlshash":"aa029d8c824beca5e64f0166bda1f8f07ca10b17c1db995f8b8292bb7133607b954d03","first_seen":"2024-12-06T22:27:57.052392Z","last_seen":"2026-07-12T20:24:56.443796Z","times_seen":167,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youzhongguang.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youzhongguang.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1508\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYWykHQJx1fbxjsqLrNewwDElocviUfKKf%2B2o4cQuWtlyuoKNa68fBKn%2Fv2kvs3OMdlMfdRQMbXA6nnFVIKF24Hg3EFexPskA1%2Fz3Q%3D%3D\"}]}\r\ncf-ray: 9866727a296876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 144 x 88, 8-bit colormap, non-interlaced","md5":"b886d5f3b6e31dd10a4738257f041676","sha1":"924ac9e498ea06ad7c1275f22176b249817177b6","sha256":"142e765e5ceccc6f1b2924583bb2fec03f9b4ee5d0f2063eb0ff540d51b3d171","sha512":"2586342f97a806c6a712a21bbb1f55b57661dd04d17965984a294049bca39d28b6f2bb82b2b9297724b1bce3532f5a7ae7b2dee5f5a8f7fe64a50c09d1ad3c7b","ssdeep":"","tlshash":"8c31d85292422b268a8f5ad07d92dab581bb0a4927c113c3ed30c8935ef7b897b458c2","first_seen":"2024-12-06T22:27:57.063897Z","last_seen":"2026-07-12T20:24:56.487894Z","times_seen":167,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__173.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__173.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2532\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XLm61M8jhIFtpwADKCYLWR4KeB58lAZnJ3fj%2F%2FD%2BSYnb8KlyWMwo1QD91stlLovFpeZe7UpB1lCIaqU6X0fyHuce6JclwXMYZUbPWQ%3D%3D\"}]}\r\ncf-ray: 9866727b0a2576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-06-19T04:15:48.657646Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/lvdi.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/lvdi.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 32577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GRSwrvzJ1cihF1njc0tUjrkSemOmCY156uZElwAnlel1FxktqAtaf8sbHhlkD4v3ER6KuviCsKaSRtsVKbmTEAu7GaymvbP0UIFkFA%3D%3D\"}]}\r\ncf-ray: 9866727a396c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32577,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 1076 x 611, 8-bit colormap, non-interlaced","md5":"65e59a05227686e74018c7aa1e77a96e","sha1":"a4e3a8290f3431092dd3f4c291170d834bec9f51","sha256":"607065c74f9dc4846d13d05fd91a4c78be4e94957a4d64a2eb3141bade8ffd68","sha512":"cd06aa98c2a83b85885ed0496cd1c1149ddcb98cf6659c516ce4f630ceefdc8f201d918f4b4f92b525c9ee2770bcba9be7db8964a3936ab2aa1d386c99c7f586","ssdeep":"768:Kiw1ZWPrjVJaUDNaJpbzMM+Xxpre4UdrIQi6:KiEWHupbzj+XXrbUd","tlshash":"f2e2d11880096e01c28fd8f9ea85d5c28f3f50cb46f86997a115cae724afd7f5862e35","first_seen":"2024-12-06T22:27:57.077254Z","last_seen":"2026-07-12T20:24:56.48099Z","times_seen":167,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__88.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__88.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1117\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2F4F8JRAzig5Lw3QAfQ5LnpS3ztbKFbn%2FmoccMnL6n5lG7xtMaxuxOPcGtRbix%2F2sEmvMk%2BHSkcQl1llhJHgCJWt8nv7YiaZBVEOdw%3D%3D\"}]}\r\ncf-ray: 9866727ab9ca76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-06-19T04:15:48.29825Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__93.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__93.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9SQQGodHxeGoUWDGOwL6BiQ%2FYNEu6hKZyg6TCBZ1b1JSajlTWGDeyU9yI7RFBcWEipg3nY%2FUoFD2TEqxYCH1WdKEXBGkrVzO9MpcA%3D%3D\"}]}\r\ncf-ray: 9866727ab9d076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-06-19T04:15:48.295262Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__99.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__99.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1085\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3f7dRoXvv7OF6ckOf0AWDV%2BWjzaAgbbQgXo7QimdNseFfD0Pc959b3Ir0F0OnkfK%2FMzl3Kv193f0yP4mJibPUHL%2BD3pdAXpsEzoZ%2FQ%3D%3D\"}]}\r\ncf-ray: 9866727ab9d676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-06-19T04:15:48.292299Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__106.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__106.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2379\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ru4TGj26SUQsViWA438eb3Pzsxccg%2F5F0ak3Xu6tjoFXWiNagb%2FIYWHwD0s76ljJr0%2BiXLghAIA50uiDiWC3oZA5pkYkfL%2FHNfIzEw%3D%3D\"}]}\r\ncf-ray: 9866727ac9df76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-06-19T04:15:48.549093Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/zuoxian__00000-00106__108.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__108.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2532\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iV9NxME6mybLaYxlNZ%2Bj0m3t9bZf52dO9HZjcnSnrxMH5eVg%2BRvLTfK0GNP2UE5w5fygiNcMLGxwDodhjab%2FA324By9rPdNSL0zIwg%3D%3D\"}]}\r\ncf-ray: 9866727ac9e176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-06-19T04:15:48.657646Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/dunmian.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/dunmian.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 43316\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBGgNiH%2F9ld5xHBuDUvDLCDjnNtOiwVkzOjxMGyKTDIjJ1gIl%2F1%2BBNt1Rysy1bH3mAh7E8TBnNPFhuRwFKUN7cVZRdaRPfjeiRxLhA%3D%3D\"}]}\r\ncf-ray: 9866727a095c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43316,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 332 x 411, 8-bit/color RGBA, non-interlaced","md5":"2f671e8c36ac6c4735bae0238043fac4","sha1":"4f44711091c8dd62ebb57a83d5be419842385437","sha256":"78c2723ce75d20996385fccb0ec93212d5c9049cc5be7945f99b0fdd4e48c120","sha512":"0eb0f7f681e80246a29c561991da123fd33793eee3e8b15563caaf718748393c38c703959a90e42681cf7a4f1ac60dfb0e97126be8ae001331219bfbbc1ae23f","ssdeep":"768:aywhy0faB9x/RO+D2p7GT3DyTKYJ3bPT/Zirwx53CoToQZ18zB+7D/BeLcUETSRC:aywYx5EimyTOTpJ3bcG6QIBgD/McUET5","tlshash":"a613f22a1e92f4c1c010ef5ce2c8b6b24d7e31cd6db5d2e266c5dd26621037b5e1af18","first_seen":"2024-12-06T22:27:57.127249Z","last_seen":"2026-07-12T20:24:56.431029Z","times_seen":167,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__6.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__6.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1146\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6nGPWsPCP6uE3KEXgCTso4%2Brl7at0Y0CqI4m4C1RLVOsfVxZLHasi3LpCF4SqNMHEmkOgWRW5%2BOD9A8yop7SInFDG8KUpLKz9rcA9A%3D%3D\"}]}\r\ncf-ray: 9866727a497576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-06-19T04:15:48.287275Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__14.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__14.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1129\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2tLI9%2F8PO96SlRf%2FffdX4KIzXeRY0E1HOIavY%2F3Pj28%2FJG0PQKkY%2FNu2u3tsMJGTsxOyEu5reaUoXRr8JhSO5Os4In7amcSpOmg6A%3D%3D\"}]}\r\ncf-ray: 9866727a597d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-06-19T04:15:48.405996Z","times_seen":156,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"direxbit.com/assets/lottie/img/youxian__00000-00105__21.png","fqdn":"direxbit.com","domain":"direxbit.com","tld":"com"},"ip":{"addr":"172.67.164.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://direxbit.com/","date":"2025-09-28T21:48:49.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"direxbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 15:21:49 GMT","end":"Fri, 26 Dec 2025 16:20:35 GMT"},"fingerprint":{"sha1":"35:97:CB:6E:D2:E4:EC:DC:37:DF:A5:1C:7A:D1:80:BB:19:9B:3D:A8","sha256":"7B:76:E1:CA:57:DA:D1:07:3D:50:FA:07:BC:57:B8:03:F7:62:D8:44:B1:8A:EE:57:18:D6:2E:A7:F0:BA:13:5A"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__21.png HTTP/1.1\r\nHost: direxbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://direxbit.com/\r\nCookie: JSESSIONID=123291620DAE447B739CD24DBFA61628; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 21:48:49 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1085\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 13:10:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 197\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eaMmUb7OEPMS7s0V1wXPNFNpSqMqK9oaUL9TLvoJAi5CHOx2f8kw6ZFe4VjcwPruoUwMDptOoOHbR2us5JVh7g3KJRx5ewaJSyo13g%3D%3D\"}]}\r\ncf-ray: 9866727a698476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-06-19T04:15:48.292299Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"direxbit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}