{"report_id":"34090d60-da8e-4478-ac3c-8dbf214b1ac1","version":6,"status":"done","tags":[],"date":"2025-09-27T18:29:25Z","url":{"schema":"https","addr":"sshort-market.co/","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":0,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"final":{"url":{"schema":"https","addr":"sshort-market.co/#/","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"title":"wallet"},"submit":{"url":{"schema":"https","addr":"sshort-market.co/","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":0,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-01T18:29:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":9}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"fugui88888888.com","ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"domain_registered":"2025-03-12","domain_rank":0,"first_seen":"2025-07-27T05:46:14.596053Z","last_seen":"2025-09-11T12:37:48.046857Z","alert_count":0,"request_count":31,"received_data":211414,"sent_data":17451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sshort-market.co","ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"domain_registered":"2025-05-08","domain_rank":0,"first_seen":"2025-08-09T14:42:23.749563Z","last_seen":"2025-09-11T12:37:48.03799Z","alert_count":192,"request_count":24,"received_data":1977083,"sent_data":11174,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.220.205.65","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2025-09-21T23:03:55.417152Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sshort-market.co/static/js/pages-assets-index~pages-index-index~pages-trade-index.ee95be56.js","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec586f37e78f2b6305587bca4662db90","sha1":"dafed0a23631c9162aac4eb43ab6e75c2eeca3d9","sha256":"52cfbf50d9d1da07c45bed27bb7d8933cf0540cc41198db7e93d3d4aed52a73d","sha512":"390b9bf046fe625f68d7276ca3fd75f748dcebbd14d1d54ce8d11010d785eea08a8d8537d34d11e1b76d9bc9158f8a1c9db8ad20f6a527cc9aa3e83588808ca3","ssdeep":"384:JJ9yx2Hs8sURaHIPquJOwnWJAWG/3jShrGq0V:r9EqqKO9hGOhrGq0V","tlshash":"e662d768b0caf037168bd565205f3e04512b7e95c418bff4f376f1e40ee958d226ab1a","size":14884,"data":"","first_seen":"2025-08-09T14:42:28.357062Z","last_seen":"2026-07-21T23:47:26.502996Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/js/pages-index-index.04255442.js","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"81088b543861aabfd23fbd6bc471d811","sha1":"e575e470d9223fc997839ab3a3ae7154dae0397d","sha256":"6ad579f6c0b7b37aef524647fa4cbd00efcac9351e3733617933074588fd9b8e","sha512":"00fc2196adbad5994bd01f3951899f2c5e028a4879bdccfe7f0533d646adfde1dfeee1692b4283bb20e54df508b1802e60afa41ca186e307e9a83f19b9727b99","ssdeep":"1536:phfilUrsA0XSJOmc5J7NsmOpSJOC4DX/RVGbKnMhfrnx:PKa+vNsVaJXrnx","tlshash":"02934c08f1cbb06f595b9564106f270580367ba9e0069b9cf776e2d48e9d68e3263f3c","size":92925,"data":"","first_seen":"2025-08-09T14:42:28.272006Z","last_seen":"2026-07-21T23:47:26.507414Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-08-11T07:37:19.168483Z","times_seen":7170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/js/index.48cca336.js","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec11b14f9c278406258c084041be41f5","sha1":"066231d72b524210ec42132349ce373987044a33","sha256":"65e360f0f3074ad7e02db9ce4011dcc4adeab9207f4400cdbed7d39b4e2f5783","sha512":"80a8b6a4d9db6f237dfe3904c36e0295d21ccf69b65ad61cad340b84e80fe8ace3fccf29c38a77106e596bef04a8d35abe120921274f9a8eae1cdfe078e03ded","ssdeep":"6144:QOoIl4VVk8P9emBaVr/PiH7ImWJMCN5z58g5sROpPncKL:rLl4VVk8P9emBaVr/PiH8N+EzvsQxcKL","tlshash":"7a642b87b6cd165c5a465a03a05fb7fdb1b72c91b702f8c1c1982f206be479bc222d79","size":311883,"data":"","first_seen":"2025-08-27T08:42:24.710684Z","last_seen":"2025-10-31T14:28:29.419802Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/js/chunk-vendors.8a700faa.js","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"226d3dffa02f3cd587be366c3cbe2ec0","sha1":"f6e7ab3b8d7e88933800ab0bcdb1669907e4c6b3","sha256":"cdb79a04261b65ce0d0222306875308e0a6bc601fc2cc5dc6bbb46b5fd23dd9c","sha512":"e554481d8ce12091b9da2053444fcda89f3f58c3303e1f6f204daa30030616dc7f99a14586bfea0240e1f2748882b92f649b2756bb41d92832b07122acb84a59","ssdeep":"12288:05YrCI+pBmmTd3mFJAepUFE4qSuVdVAT5k/JcBrNqYWP9:05jfpBmmTgFJAtFjqSuVrs5EJiNqYW1","tlshash":"c4453ac97286b4a647d321f1403f220bb23a2e68680e9414f6a5e4d1bd79dad5337f7c","size":1178268,"data":"","first_seen":"2025-08-09T14:42:28.371132Z","last_seen":"2026-07-21T23:47:26.518762Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/js/pages-assets-deposit-charge~pages-assets-deposit-index~pages-assets-index~pages-assets-record~pages-~49d143e3.a3eb3550.js","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e4532eaf6ec77925af5e35fe0c5b1f4","sha1":"e052958f30300174f4f9a107c8c573814d24c53a","sha256":"1cd9f24e443cac084289413cd3f15772185c4645e4c50e6f7c863b28a9c14fe4","sha512":"7c835e80ffe254ba37c684ff468af84388bdecf61edcba24a7acfe5d1004e6172c524af82a6e4ab1cd5fe64aad9031929ef6deea957d5677583f55be8f25b63d","ssdeep":"1536:dHFBsYId0FHoMqu7NdEAaM2Ol51hwJX2RcJZHYpN7xCIx/+eJF4cL3nnisGQaOmw:dHjsp0NVr7fnaMj51hwJX2RcJZHYpN7n","tlshash":"b443fbe6e10c1cd17f7bcc8f6240235f6549ff62d9968dc8f126264c8de27a021a977a","size":55422,"data":"","first_seen":"2025-08-09T14:42:28.317135Z","last_seen":"2026-07-21T23:47:26.493842Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"wss","addr":"fugui88888888.com/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://sshort-market.co\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ab7G7qAuPanocpu6A0ss7w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Sat, 27 Sep 2025 18:29:02 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: HpNJGg08noiV+5z16LEyoH3vzQs=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":1313,"timings":{"blocked":0,"dns":439,"connect":580,"send":0,"wait":144,"receive":2,"ssl":581},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/js/chunk-vendors.8a700faa.js","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:00.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/js/chunk-vendors.8a700faa.js HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-11faa4\"\r\nexpires: Sun, 28 Sep 2025 06:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1178276,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9839)","md5":"a7d966e1b942751c12784647900e86b7","sha1":"e4cbe1dffbba7e0ef5a5123c87c66ffaf4dfd27f","sha256":"84c980554cdc9b3d613a55f6360fd9f4f4e1319d9909f5a249e42c169b102643","sha512":"e696c02b067560ddfa60e53a3fd9e2e91b3a5954917f9cca88e182a316f4ba258533957a12079a4bc1e56c9cc78aac3debf4da83b80b723d720e9202344d9f74","ssdeep":"12288:05YrCI+pBmmTd3mFJAepUFE4qSuVdVAT5k/JcBrNB:05jfpBmmTgFJAtFjqSuVrs5EJiNB","tlshash":"7035398d7286b4a647d321f1003f220bb23a2e68680e9414f6a5e4d5bd79dad5337f7c","first_seen":"2025-08-09T14:42:28.063402Z","last_seen":"2026-07-21T23:47:26.511378Z","times_seen":13,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/fonts/DIN-Regular-2.cefc4e9f.otf","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/fonts/DIN-Regular-2.cefc4e9f.otf HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 20676\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\netag: \"689ca36e-50c4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20676,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"cefc4e9f0d6e7416521f230e0bd690cb","sha1":"503f919cbd521f8a417d82eb90c680874c2ed666","sha256":"a8ac9cfacec43dd23fe2dd61e2ca64f62e9635c47b43915a6f534e5993bc5cc2","sha512":"36e0a692e16f6940714dbe5d18dbbad48bed2215e6eef718e36f2e56f868799830bfcb4b175489561ce14821257864a842d3fabde69b95d5ca8d684410926e21","ssdeep":"384:siBLb1kb+bmaXoAdekq0dtjtI66/WbQVWmT7RfiSKHW:siBv6a3skq0tjtXUVxTcSd","tlshash":"0f928e5b9c941b08c5afb33302226244d6b0a8b893faf4d7dd4422fb34ad9575d7ca93","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.509561Z","times_seen":152,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.220.205.65","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:04.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 28 Sep 2025 15:29:04 GMT\r\ncache-control: max-age=75600\r\nset-cookie: __uni__uid=rBEQRWjYLPARexz7A07QAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-11T12:09:57.787535Z","times_seen":20197,"resource_available":false,"data":null}},"time_used":1227,"timings":{"blocked":498,"dns":4,"connect":232,"send":0,"wait":231,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:17.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:17 GMT\r\nset-cookie: angela_session=eyJpdiI6InJqYnVNWUxiTnV6Vmg3N1o4SWoxd3c9PSIsInZhbHVlIjoiV1RkODdmZktKWDlxcEVXRmI5a2dQXC9rNjBnNkExMnpFZ2laU24xbE43ckxkQ3BcL2ZkSVI1QkEyNmJcL0lpMHBYeWtPTkpHTTR5ZTBBRzc2Tk1YbGZxMmdTNXJIcytCUFE4UWdnZkJHQyt3SFo3aVJzdWJ2T2UybkE1cEVLSTQwUm8iLCJtYWMiOiIzZWExNmJkMDBmOWMwNTQ2ZjQzYWRlMzAzMWFhOTA2MjVkMjk0MTQ3OGNmMzc3YzlmZGU1MzMxYWE5NDQxZWNiIn0%3D; expires=Sat, 27-Sep-2025 20:29:17 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:17.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:17 GMT\r\nset-cookie: angela_session=eyJpdiI6InVqcGM4Z1pEWnJSMmZlYkQ4bkduQ3c9PSIsInZhbHVlIjoiTGNoSFNcL3JZb2NUbGxLaVliNnZcL0lRRXpiWmNNUEZqTlBSaFlvaW9mZXczdEtlRHBSbUVYb0VHQU5oMVwveDl3M0xhZzJyc3pUSFpuRTgzelJJRzRkVFhoSmhreTk4RVwvM1JDdGMzb0xLVlZoOVB6dWk2dk80ZE5ETTV1TERKZzI2IiwibWFjIjoiNGZlY2JiNWUyODI2ZGM4NmRmMWExNTA3MWI4NzllNzM5NjU2M2ZiY2FiNDczYTUyYzFjMTcwNmFmZDJlN2Q4NyJ9; expires=Sat, 27-Sep-2025 20:29:17 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:22.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:22 GMT\r\nset-cookie: angela_session=eyJpdiI6IklRTGN3eXBSdFNlZHRXV0N4Q3lTNVE9PSIsInZhbHVlIjoiWkMrZVpiNWN1S1wvcjNcL0FLUmpVNzRwOVI5ZitTNzlGSlkxbzdRZ1wvZEJtRmxZVU5iTjU3U1VTS1NyR1U1anV2VVlpVTAxeElzS2ZJMHRPcnVmY0ZcL3BJSkd2NGhSV3V4M21sU0Z5ckVRbDNreUUrQlVTZUdYY2oxZUpmRldhXC9kQyIsIm1hYyI6ImUyNjZiZjBhMmJlMzA5YjliMzFiMGVlMDM3YTNmMjE2OWRlZGJmZjVlOTBmNjMyODRiMThmMDUxYmNkYmQxYjQifQ%3D%3D; expires=Sat, 27-Sep-2025 20:29:22 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/index.63b34199.css","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:00.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/index.63b34199.css HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-17884\"\r\nexpires: Sun, 28 Sep 2025 06:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96388,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"98c3f2478e126911070b7d39b60e33aa","sha1":"7876e4e482f948021e45fdf1ba6bfb507f747028","sha256":"0cbe21cbd48de683ef65476d5eef01398e97cd11130758352c99f9eb5b266da6","sha512":"b4f2c94f56dc4a90b3081a09c6a1e237f001c4164512833bf9cb187666e1d4ebefe5cf30e471b8c8f53d7b2f4a4d234819713cc629ae7a8a199d2e6fb20946db","ssdeep":"1536:blIApuK7hmVmb26S1Wu3xdyn37ehgnjhlvbc:qApuK7hmVwS1Wu3iy6njPI","tlshash":"7393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2023-04-05T10:02:29Z","last_seen":"2026-08-10T18:31:10.506982Z","times_seen":432,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/common/lm_2.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/lm_2.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-5a5\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced","md5":"06a43db0d552cb5a405ca74704a65705","sha1":"cc0890640d6c246c219ef4a93aedf0724a14f71c","sha256":"d857a8c315937da20836c04d2b4cedad4154c9e98726bd89ed00360ca9fd3fe4","sha512":"9bc8169a49a4fa5df08cbbb68af4dcd4372dfb6af0281c2d21e4f05c5a4c690f1cc7f8c148f0e36faead384049c910a36945fc3cc5ad3e2b695231d196ccfc44","ssdeep":"","tlshash":"8b3196dee94114c152ccad9311eb2023e5920c848eb5ba61f4cdd80b5e316f2016b9ef","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.505946Z","times_seen":132,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/set/lang","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"POST /api/set/lang HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nContent-Length: 7\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nset-cookie: angela_session=eyJpdiI6IjRtOE9nYjlVQnUzcVdsbkRoZ2NIa2c9PSIsInZhbHVlIjoicTBpVnVxRjU3ZlR5VjIySWIwWDl2V0ZcL05cL2hobVorRk9cL0pLUFUxbzljWVpGVVJic0MwNkdcL3ljMG9KXC9nUWxOMytrbEFOU1Z6M0tGSXg0eW5nS0kzVmtXSHI0Tkw1MU1YeVhmQ2FvSm1YVFdCeG9iTWJoUFdXTkx5VVoxTUczSCIsIm1hYyI6IjUxM2Y1MDVlNWU5YjRhNTJjYjgwM2UxMjcyNmQ2NjdiNGMwZWQ3MTkwNzM4ZTUwYWUzOTY5MWEwNTU3NmI3NWQifQ%3D%3D; expires=Sat, 27-Sep-2025 20:29:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2b76dea6233c88d2332661b50b6dd98c","sha1":"c7292569ab8847c30b7ddedb036bd6568fa7492a","sha256":"1e1a923b95917c8b621b9b2619ff97432230de73de942a1b05b26e81f2f9b0ce","sha512":"0c6e0996e3091acf02d4bdea49ec8f42e3934fb67859c0a86011bb16439732c68fa9ccdda1ed3c971264e5b44e5fdad02331561854445c2312e3da54af088852","ssdeep":"","tlshash":"bea01230252c3d120f00815d25884cc0944e2082c040180109845610891a051312061c","first_seen":"2025-09-27T18:29:29.93459Z","last_seen":"2025-09-27T18:29:29.93459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nset-cookie: angela_session=eyJpdiI6Ijl6THp0dkluQXFlbXJ5MHFNcDRSZEE9PSIsInZhbHVlIjoiXC84Y05GRWpsZkE5REpCSnJjdmR3TUpiWlpwcTRieWplZlwvNVNkc3VtMklIWnVOZDIweGFJSHliMEtwclJsblBSUkpnaTl5a0VYWk5IeEFYdHRaK1gwUGttVGdFZUo2c21qdHIxc0FITHZmUCsrTG9WZ1lGb2NpSHFEZ3IyMXBsRSIsIm1hYyI6IjY5NTkyNmMzM2M4Y2JhY2U0OGIxMDNmYjY0NDYwOTIwOTA2Y2U1NTk2NTA2ZDBlOTE3OWIxNDk2MjMwYWJhNDYifQ%3D%3D; expires=Sat, 27-Sep-2025 20:29:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73446987a0839f5ea608c74ea2ed0f5b","sha1":"ba6075f42e5307059b65c29dd73cb6eaf775923e","sha256":"13e63b9ae8322b060e04a608d85ac31190722ac691aeecc3d27f83070a74e510","sha512":"9c04bae91caa847db359348f322afad90cafffcefdf380c6f657b26643304b8118b38bbfe398b14a38fe0e0742a332ad1aebbdb2c9fe39e1be9614aa5186bcd2","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3mFjgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkx:/ACtuaxbV4jOvHOfHxa6+P7w","tlshash":"5912a18d362d9a7cd6b67ec1dadb369a3551700badc24f41c3ed5f88038557ba20b502","first_seen":"2025-09-27T18:29:29.938275Z","last_seen":"2025-09-27T18:29:29.938275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:15.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:15 GMT\r\nset-cookie: angela_session=eyJpdiI6IkhkeDhrWFZvcHIzRTk5cWpsRUFqZUE9PSIsInZhbHVlIjoiK28rN3BINUZDejhGaHM3TjN0eXV1aUFrZlRsRnJOWDl6dXh1K0RTSEFkQWZUeGVcL1pycXVYMTBGbXh6VFhPZ3YyWXZlZ1NteWMxNVZWZktnVHozVTFRRHF5XC9GXC9XT0RhckxZdkE1emFPNHlDaDdFWFRGN1dqZndwMk5jMmtSWkoiLCJtYWMiOiJjYmFlNDQ3MGRmNGFhYzVmODc4MmJmNmQwMTYzNzkwZjU4NjU3ZDIxYTdlZjBkMDg4Y2ZjMTRlMjhiYTVkZWE4In0%3D; expires=Sat, 27-Sep-2025 20:29:15 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/tabbar/tabbar-trade-dark.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:01.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/tabbar/tabbar-trade-dark.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-6f7\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"924774de89f690148969766739d185fb","sha1":"695a4e9b8b3153d44cb80b41f0dbc6b260d584ed","sha256":"e3cffa48f57b5da551c2e0431279d16f59ad01702f974caaaa0ca641ce4257c5","sha512":"93212cbc0f0dafbd23973dabb6f2cc289a6ca2ee6ed520d333b300663900a812faa9afed7d2c49f340a6968a28fd0080790ff34cc25b78601f1e202f8c1327b2","ssdeep":"","tlshash":"a4310b9bf9907481dd95e99004f7b5265b394940c3c09218b4ef58232c712fe987e1df","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.499901Z","times_seen":132,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/js/pages-index-index.04255442.js","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:01.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/js/pages-index-index.04255442.js HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-16afd\"\r\nexpires: Sun, 28 Sep 2025 06:29:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92925,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65388), with no line terminators","md5":"81088b543861aabfd23fbd6bc471d811","sha1":"e575e470d9223fc997839ab3a3ae7154dae0397d","sha256":"6ad579f6c0b7b37aef524647fa4cbd00efcac9351e3733617933074588fd9b8e","sha512":"00fc2196adbad5994bd01f3951899f2c5e028a4879bdccfe7f0533d646adfde1dfeee1692b4283bb20e54df508b1802e60afa41ca186e307e9a83f19b9727b99","ssdeep":"1536:phfilUrsA0XSJOmc5J7NsmOpSJOC4DX/RVGbKnMhfrnx:PKa+vNsVaJXrnx","tlshash":"02934c08f1cbb06f595b9564106f270580367ba9e0069b9cf776e2d48e9d68e3263f3c","first_seen":"2025-08-09T14:42:28.272006Z","last_seen":"2026-07-21T23:47:26.507414Z","times_seen":14,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:12.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:12 GMT\r\nset-cookie: angela_session=eyJpdiI6ImFuMFVqMzNmOXd6WllcL1pYekFNT0xnPT0iLCJ2YWx1ZSI6IlJpT0FZRDk5NDZrY2N5eFI4dlZZMGM0VmwxVGlHekpIUmFBZWpMKzhkQUYxT3RkS2V5UldHbmNZRmZwbHRIK1ZLNDJ2azc5Y3J4U2ttNEVrQlgwN1l1V1J3KzNxTnEwYjNnQVlNQldIc0JcL1dJTVlZZ0dMNjBmbjFza014c0kxViIsIm1hYyI6ImRmNzdhZjgwN2JmYWUzNGMxMDE4MWUzYWU0MmZlOTZlZGFkOGNhODQ3NTgyMWYwMzJlODdmYmYwYzAyZTdhMDYifQ%3D%3D; expires=Sat, 27-Sep-2025 20:29:12 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/js/pages-assets-index~pages-index-index~pages-trade-index.ee95be56.js","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:01.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/js/pages-assets-index~pages-index-index~pages-trade-index.ee95be56.js HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-3a24\"\r\nexpires: Sun, 28 Sep 2025 06:29:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14884,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14824), with no line terminators","md5":"ec586f37e78f2b6305587bca4662db90","sha1":"dafed0a23631c9162aac4eb43ab6e75c2eeca3d9","sha256":"52cfbf50d9d1da07c45bed27bb7d8933cf0540cc41198db7e93d3d4aed52a73d","sha512":"390b9bf046fe625f68d7276ca3fd75f748dcebbd14d1d54ce8d11010d785eea08a8d8537d34d11e1b76d9bc9158f8a1c9db8ad20f6a527cc9aa3e83588808ca3","ssdeep":"384:JJ9yx2Hs8sURaHIPquJOwnWJAWG/3jShrGq0V:r9EqqKO9hGOhrGq0V","tlshash":"e662d768b0caf037168bd565205f3e04512b7e95c418bff4f376f1e40ee958d226ab1a","first_seen":"2025-08-09T14:42:28.357062Z","last_seen":"2026-07-21T23:47:26.502996Z","times_seen":14,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/wallet/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/wallet/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\nallow: POST\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:03 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:14.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:14 GMT\r\nset-cookie: angela_session=eyJpdiI6InEyNVJmTVdzZE9KUHorVGp3VG9QeGc9PSIsInZhbHVlIjoiVWJcL2hkQW1XNDFlRFgyYWNBSWZvV1h3WEp0R1dLZHBSWVFkSEsyK21kMFBaOE1sU094UXNPTUN3bFI4Tlg2WHd4aStOU3NrSDlNSXBMb2ViVHR4YkMzUWtkRUZmQ3BFUFVwWGdVZXJ0WVRmWms1VlZsNzZiaHlzMHhlWm93OUVRIiwibWFjIjoiOGI5NzIwMTBhOTE0ZWIyODAxNjBlNjI4NTY0ZWIyZjA4M2MxMGE3MTAxYTI3YWQwZDk4N2Q2NzBjYzJkMmZjYyJ9; expires=Sat, 27-Sep-2025 20:29:15 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/news/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/news/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\nallow: POST\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/common/lm_6.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/lm_6.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-6c7\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced","md5":"fb7c1ab1476b2b6be4d49a6cb35fb25b","sha1":"986fbfc4d865ce4e0043049603073670161ed6ed","sha256":"57d4a342ec3e59be5d2fad45490700adeccd84a0b3cb16c94f788dbe8b7718a2","sha512":"4ed1530275ce8eb6963dd15c89d38b443fdf4938282927e3dc4233296efa4cc53edde8ed364e457fb766a4e1e2b22dc419a694842a1a5294a05e98d5fa67d7af","ssdeep":"","tlshash":"e931850eb551ba4252ede68129f7417ada079c408bd4b0a174cfd06299223b4856b3cb","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.506477Z","times_seen":134,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nset-cookie: angela_session=eyJpdiI6InFTY1VDY1NnY29lRUxVVGJoRWRzcWc9PSIsInZhbHVlIjoiR3NzcGU5YUpOWGorMWU4RmxTWklUY2UwckxSdEUxRnA3OE5zeWpMYVBkSitOd0JydUV3WjJqS3hRNnVEMG9razB2R2FqY09JRzNpN2lpaGliR1Y1NFBJRHZQUEZvNkhBRmhnVFwvam9DT1Q2WElDK3ZnWkluR29YNm41RldsOUFMIiwibWFjIjoiM2ZmYTM0MzBkMWYzOWRiNGQ0NmRlYmQ2YWY0NTljMmVlYzg5YzRiZTczMmEzNzU2MTg3M2NjZDgxZTM5YTdkMSJ9; expires=Sat, 27-Sep-2025 20:29:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73446987a0839f5ea608c74ea2ed0f5b","sha1":"ba6075f42e5307059b65c29dd73cb6eaf775923e","sha256":"13e63b9ae8322b060e04a608d85ac31190722ac691aeecc3d27f83070a74e510","sha512":"9c04bae91caa847db359348f322afad90cafffcefdf380c6f657b26643304b8118b38bbfe398b14a38fe0e0742a332ad1aebbdb2c9fe39e1be9614aa5186bcd2","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3mFjgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkx:/ACtuaxbV4jOvHOfHxa6+P7w","tlshash":"5912a18d362d9a7cd6b67ec1dadb369a3551700badc24f41c3ed5f88038557ba20b502","first_seen":"2025-09-27T18:29:29.938275Z","last_seen":"2025-09-27T18:29:29.938275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/news/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nContent-Length: 14\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nset-cookie: angela_session=eyJpdiI6IlR3WUJiNUU3cUhtVTZKOXI3YXJucWc9PSIsInZhbHVlIjoiTXgweGpaMFpETkc4d0xGSUwwTVo1VTZhZHhVYWVXd3U5czJINEJ3XC9YQ3pWT1FZN1p4NDV2N1JYWElocmZCczhPbWQxMFhSMEs1TzF6S2FYM3BRUzFDM080WVpObThqaUlUbkJNVE1CSFRmRUR1U1hiQ3Q3Z1F4Wmo2K2lXUDhJIiwibWFjIjoiOTZmN2E5MjVjMzUwMjMzZGExOGFkNTQ3YjY3MTU0NDliODQyZjhjNTQ2MzY0NDkxMWRiMGIyNmRiZWM0MDA1NiJ9; expires=Sat, 27-Sep-2025 20:29:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bace47e4713844c973de88e19678c6e0","sha1":"570e51227d00a907a45f9f546ffb472fa5f0f7da","sha256":"42692ab1be49a1606270fb6a6e639cb4eb95db75580cd4645b64d8ed88b3073e","sha512":"461b0fc2193876a9e6cf68eb09d070c01736b653b92c47690ab586575fcbc894ce6e14a941aa224ab2602100c055516a006cd9444b582fa40b658211720e97f1","ssdeep":"","tlshash":"1ba0222020000cba8b0a22e2300b30a2888c20808f0383000ac0a00cc38c0ac2822a3f","first_seen":"2023-08-27T03:45:08Z","last_seen":"2026-07-21T23:47:26.500971Z","times_seen":139,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/img/mate.73d0d401.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/img/mate.73d0d401.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-dda0\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 689 x 362, 8-bit/color RGBA, non-interlaced","md5":"73d0d401b5d73d5da5d7285808761e89","sha1":"194d93fbf1d1d5110c4ed63a35986db00e01e5bd","sha256":"4692ac431357c2aa24cdea271181fbc9f91e3d6435c61ba11263823060703a7d","sha512":"20d30637847b67090fe62bd4b5cfb3a3344bf73cae2fbb0fecea0c2400caf4ffa0d377f5a69e07a2b2871904b948ea78cdd3f3f375f539d3611a7544677dfe21","ssdeep":"768:YU7zRyw/HZDcXzh71eGVt8zQhYTWiH7bU/Gb8DLidOmrwdI3bkV/j1paUCUE4r:t7zwyxE1eGVgOGd7bUHabrDwVHHCmr","tlshash":"cd43cf73c461157bc421c6bc98cdd613ce391cad2afe254652aafe21e3e64c8b047a89","first_seen":"2025-08-09T14:42:28.230512Z","last_seen":"2026-07-21T23:47:26.510279Z","times_seen":24,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/tabbar/tabbar-option-dark.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:01.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/tabbar/tabbar-option-dark.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-646\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1606,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"aebdd7fcf282bc311c63aff7dfe05e8d","sha1":"5ce7c85bf972b2f6c3a72e60b8bf86d6810c33f3","sha256":"7213f978329cfcb949eeecb1f59a84f6f24ad6d88ee0de15a2ded298aeb9df09","sha512":"a28aaaa24352ba84b58ec7023b2790a5772530986413444a5ab2cc24071bdf69bb09dc089ad4b79a4cb8f7e75de9d2570cc648b3a392f07dacf847a0a0c7f4ee","ssdeep":"","tlshash":"6631c85bee58bc006689eac210f7352789228584df40e1b5a4e7c86d6db20fb040d6d7","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.487546Z","times_seen":135,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:05.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:05 GMT\r\nset-cookie: angela_session=eyJpdiI6Ik00cEI4cExCYThKQ3ZpXC9CR3Zwb1RRPT0iLCJ2YWx1ZSI6IlNVeXJzSnNzRThldzdVb0dhZUllc0pVdVFGT25rUlVRTWNaWTdaVmFYeFFwcG0yQlhKTjZvQzVDbDAwWmllRFpjSVhiNGJOSG1NZys4M1U0OG80QjlJSVo1bmN5K3FGXC9IUHFYOHB5anA1ZTZrQ1JoUVV4anhFcndrSEZieE51UCIsIm1hYyI6IjE0ZDU4ZGM4MDViMzBkYjQ5ZGYxZTRkZTdjOTdlNTI4N2Q3NmY1MjdiZGNjYWMyMzIzMzQ0MDFiZmY2M2NkYzcifQ%3D%3D; expires=Sat, 27-Sep-2025 20:29:05 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/js/index.48cca336.js","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:00.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/js/index.48cca336.js HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-4c24b\"\r\nexpires: Sun, 28 Sep 2025 06:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311883,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64211), with no line terminators","md5":"7a96c70856186c190af1622d1d2b7c51","sha1":"5b47e9e8a0e588177270c55e71991b9dd6782882","sha256":"122091bf94ebc140b9285e4a4dd4fe26c76b75e9a7bf69c23c25dc516c44c051","sha512":"e07c90d3daeaf63f41c1dfd234b97350c6d6a3c0e2a7461294cad6671bab2294f5c27d7597924440980bee9512ab3180715a6517ce831ef5b658546afc5aa380","ssdeep":"6144:QOoIl4VVk8P9emBaHm0FF2i5z58g5sROpPncKL:rLl4VVk8P9emBaGKgUzvsQxcKL","tlshash":"3f741a87f6c8535c4bd67a51600fb3faa3b75ce0a206f4ce8258fb503be8695c225875","first_seen":"2025-09-27T18:29:29.968419Z","last_seen":"2025-09-27T18:29:29.968419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/tabbar/tabbar-assets-dark.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:01.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/tabbar/tabbar-assets-dark.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-5bb\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"b290e229cb2c59172ddb91e298145bf0","sha1":"3ac1fcba57af7cb85a44ea8b19e902d5a474d830","sha256":"22a95652799432be65d87e0ab15ccfe4b557430fae9e90def9143931df807bce","sha512":"529b6228fd57a00a1e23a4954bac40e2657170b6e8440add96e9f05b1f541dca6332effd437fa4cc77ebdb6d6e9aadbf515acef3c5b82e70d91400f1983e3f8e","ssdeep":"","tlshash":"db31cc43fad07c801a48e9d713e540114e675d80e6d4edb6a4cabc66df710fb545c6cb","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.497473Z","times_seen":135,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/news/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/news/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\nallow: POST\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":282,"dns":1,"connect":139,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/img/net-user.ddf0d6e2.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/img/net-user.ddf0d6e2.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-abf2\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44018,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"ddf0d6e214245133a77a6d8cc56cbd7c","sha1":"9c58c947d231ea999441128113cea0388fea5308","sha256":"d845bcd61da04e154e9b6e84be2362a0e248154f838c4e099565de620dd6ddf2","sha512":"76918ecdb5f6a1a7525c4cf59aa547b862fcb37714f72b0ac9e124242a45187d00d7a6951e91b0fa49360eb6652dda207c5b01ca1e800a975538a3dd16017c38","ssdeep":"768:c98xtLZ1yChhZs6SJrdTI0UFMDbA1D88Yd4RObeD37jTGhT6AT+T+T+T+T+T+T+8:cgZRhC6OdcMABH137j6hTPIIIIIIIIIC","tlshash":"8d13c04adfa4794a0e309e137b478af007a6feea9711ee8f3464c1853c69096ad5d3c4","first_seen":"2025-08-09T14:42:28.354362Z","last_seen":"2026-07-21T23:47:26.501912Z","times_seen":15,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:04.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:05 GMT\r\nset-cookie: angela_session=eyJpdiI6IjNLdk1LMGkxMlNzTWw5TXloTWFNTmc9PSIsInZhbHVlIjoiZTh0SmtJMld2OFk4YjdjejRja0ZCbUZTOE1XS09kZ3N4NEVDYk5Td1VzVXNqOHhKZGl4UldzUXN6RnpHMmRmaVhWdW5PK3lXT0d2bjFEaThaN3hvdnhaQmhFOVlHdmtEelkxbjBBNjNpZm1nZGxkeU9wZjdMQ3pXSDFYSk1BOTEiLCJtYWMiOiIyMjFkNjRhYjNhY2YyYWFiMTI0ODg1M2FmNDE3OWFmZTg3ZmEwODFhMjM0M2ZjNGNmMzE3YTgyYzg2NWJlNzU1In0%3D; expires=Sat, 27-Sep-2025 20:29:05 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:07.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:07 GMT\r\nset-cookie: angela_session=eyJpdiI6ImpNNldQbWw0clZrYlRjZFZRVmRVYmc9PSIsInZhbHVlIjoiRWpIVzhSXC9Oa0lPTjB6cEVaNzZ4aVdPazcxdWFOSlljdXFWK1NnSVJOZzhtVXJcL3pxUzdDdXIzajgrWkFWVzV6THVjdVY5RkFcL0xHbzFXcnBzM2F4QjF6SWJKaUZ1NERIT0VXUEo4RHcybXE3ZUZWNmY4aU5KYnJOK1hOZTBRNHEiLCJtYWMiOiJjZjAxOWVkMzQ4ZjU3NjYzOGRmYzVhODVhZDNlYTZkYzAzMTA0MGJlMWM0MGJjMGNmMWU1YzRhYTRjYjFlNzE2In0%3D; expires=Sat, 27-Sep-2025 20:29:07 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:10.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:10 GMT\r\nset-cookie: angela_session=eyJpdiI6IlBiWWtPMkdUZGNEdDlSMFlMK1ZMQ3c9PSIsInZhbHVlIjoiUGFLUnBJakhod212ckh5TVwvXC9kS2QxU0VRUGNSMHh0czdxMGFNcjNWR2ZxVHFHeUt4YkMzQmhBQ3Y3UFMzS3JZUTJ1SFVSUitYbTczbmRQZkNKQmxQTURsWUVQWlQxVldsdEQxSkhCaks3VWtKOXpOMnJDVTZoejBOZGk1R2IwSCIsIm1hYyI6ImRhOWU4Y2RmM2NjZjVkMGFmNjYyZjhjMjYxYzQwM2U4NjFkYjIxMDRlYjVlZmRiYjIzMTFiNzE3YWI0ODk5MjcifQ%3D%3D; expires=Sat, 27-Sep-2025 20:29:10 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/tabbar/tabbar-home-select-dark.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:01.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/tabbar/tabbar-home-select-dark.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-5b9\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"934544b5d0cce80e22dbeb07a7cae8d7","sha1":"0ee7dc6f66b4befdb85de689f1d0f1f40884097e","sha256":"48566e7b6ae1c9bf20babc74aa88b7c0798b7463a3f034c59cc2a7b8b47036b6","sha512":"60daa0831b4c111f2f187fb12ba71b88a8f296ddccf0cbcbaaf9e9119231e9980a5596190877887ddb586de0c204e87bac3e3280d6ae55ea945cc4bb3c35d9d4","ssdeep":"","tlshash":"4831c9ccf60539020749d2c100f75527cf568e81cbe4b3daa9c984ea48201f8961e6cf","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.490888Z","times_seen":132,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/common/lm_5.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/lm_5.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-615\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 29, 8-bit/color RGBA, non-interlaced","md5":"7045dfb26a5920ae530b250d26167e2e","sha1":"924eaa15ece9d75817c3008a9deb198871a85f38","sha256":"96e893a98d7c621f83902a037ebba8d22e3e8e920af91aae576dbfe60d2b9223","sha512":"b6e7fbe774e3e5ff27a5eb20f88b4e5d8e39df8886ae40f3567626621245b5109be59a886ddb25dd33ca938ddc5f09c904cda921d90a9a6c4584dbce5e14301b","ssdeep":"","tlshash":"df31d787fa40aaa11109ef4125f28522dd778c94f9d0be20d4d768570970afb8c1b7e7","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.498938Z","times_seen":121,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/common/index_tuiguang.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/index_tuiguang.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-874\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 49, 8-bit/color RGBA, non-interlaced","md5":"ec72242466c654d1f7e1c33aa6dd4db3","sha1":"2d7abeaf7a989b394238279dfd9cf5845b8c34be","sha256":"a5b43bc1c8e644e12442592679004d02a057b3d3214b6b41054162db7b78aa1b","sha512":"613ab9a5e3d8fc35db199406cdef18a0dc05ed38455b9befdb92a70b216468ab68da7989a146449ddf104a81684e19e87ed06cdd8e3e81bd846908d348c25842","ssdeep":"","tlshash":"e4411acef9518da71148be7261e9981b7f1b09407c11e2a72c87c0558a542b28c7efcf","first_seen":"2024-06-28T12:01:58Z","last_seen":"2026-07-21T23:47:26.486853Z","times_seen":72,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/common/lm_3.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/lm_3.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-631\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 29 x 26, 8-bit/color RGBA, non-interlaced","md5":"7e5274c84ee7d974cdba7500c76a1b2e","sha1":"4d0760d8ec261e132cec3dc399724d24e7d28a38","sha256":"79303baa446dcbd527ac1ff610fabd8f92c50daf5ff54bbe847ec90582cc5e44","sha512":"d0b462d43ad57f0e1ff22a4a50f12d2fea626cc840b38b18ab0b9c3700087e140b8c1515954f22ad9f50f0a3fa5ce3b8c8937c978ce60d396c65458a3db36581","ssdeep":"","tlshash":"1e31e7d8f623c481cacdb9e118fa8117b50b8c91669aa45d29cbc0291821af708748ef","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.513595Z","times_seen":131,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:07.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:07 GMT\r\nset-cookie: angela_session=eyJpdiI6IjkxSlJqMkZDMm5cL09PKzBLT1AyeXl3PT0iLCJ2YWx1ZSI6IjVKV2JvMlZ1UHpjXC9nXC9IajRnUDMyS3l2RENXT1wvVForVGtGemhxbTY3aFpIV2ZSYUZWRVI0dGFmdE1IQVh4MHMzN3YzQk1rTkRnUlpcL0dHdHV4WlZ0dmRDYmgxVFRTbHBmZm9qckNHYVFhTTdtY2dBV2twd3RBYXVTb0JRTkdhZyIsIm1hYyI6IjFiMGU4YzM2YmZjYTUzNWFkZTJiMjMxNDRlZTk3OGI5NTEzMGFkYjgwZjA5YjRhZmI3Mjg4ODFkMzg4NmUxMjkifQ%3D%3D; expires=Sat, 27-Sep-2025 20:29:07 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:09.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:10 GMT\r\nset-cookie: angela_session=eyJpdiI6Ik9wOTAzbE5VMVBkUVVkSENHVUFBa0E9PSIsInZhbHVlIjoiYlRMamlGQ25JcEV0dFNVXC9yRmNna2ZIeEU5YzUxS2NqQUtYQUxId2FFSWpGTlExWlFWNDdtU3N6d3JOd29OczVpVDlcL1hxMzh4ektyTjBmemlPS2JVNlB3YkVweStNTzVwa1ZhQ1ZtY0xUb2Zpd0t0ZWNMSlIwTFwvdEU1V0tMT24iLCJtYWMiOiIzYTEyNWZiNmFmYzNlYmFmYTA3OTAzNGQ1YmE2OWRiMGJlN2Q0N2IwOTk2ZGFhMTczMGI5NzkxZDhmMTZkZjdiIn0%3D; expires=Sat, 27-Sep-2025 20:29:10 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nset-cookie: angela_session=eyJpdiI6IkRcL0JuRk9MdVhVbmZaWEU3Sm5CU2RRPT0iLCJ2YWx1ZSI6InoyTU5PY0wrR3pGRWJZK1NLMmg1UlJ0UUxFSkU5ZmpQMm90YW1lM1N6WlwvdE5vTkFFcjB3UE42T1FickFoTmZDRVhubWNSdFVjU1pFUllpSEo3d1YrbjVLa2czUmlDd2w0VXNoOWdXdUp4ZXBFa09JVTR6cGJwdEFqYnVqV1FidSIsIm1hYyI6IjlhZTY4NTRhYTQ5YTU2MGM0YTc0Y2YwY2I1Zjc2NDRkM2Q5OWZjOGMwNDI4YzQzNjE4ZWViZDAzNmRkZDZhYmUifQ%3D%3D; expires=Sat, 27-Sep-2025 20:29:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73446987a0839f5ea608c74ea2ed0f5b","sha1":"ba6075f42e5307059b65c29dd73cb6eaf775923e","sha256":"13e63b9ae8322b060e04a608d85ac31190722ac691aeecc3d27f83070a74e510","sha512":"9c04bae91caa847db359348f322afad90cafffcefdf380c6f657b26643304b8118b38bbfe398b14a38fe0e0742a332ad1aebbdb2c9fe39e1be9614aa5186bcd2","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3mFjgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkx:/ACtuaxbV4jOvHOfHxa6+P7w","tlshash":"5912a18d362d9a7cd6b67ec1dadb369a3551700badc24f41c3ed5f88038557ba20b502","first_seen":"2025-09-27T18:29:29.938275Z","last_seen":"2025-09-27T18:29:29.938275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/news/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nContent-Length: 14\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nset-cookie: angela_session=eyJpdiI6ImN6Mis1YUg0SDBBbncxQlpYXC9Xb0JRPT0iLCJ2YWx1ZSI6IkhOY0l3UXRnVzhHcVJTU0lnQUlkcmNUMXkzU2Y4T1oxb2tqZ1Ara0s5ck40S1B4a3d4UVFhNTJpSE1vZUVpVmtOcEJJME9oTThMZ1Y1TDlpR0NwQzJpOHNkME5EVURRNllaVCtHY3A3b25hQWVPbm90dWt1VjI5Skp3aE9FYzVcLyIsIm1hYyI6ImJjY2E2MGMzMWVmZWJjNzE5NGViMjhmZWQwYjJlNTk1ZmU4OWYyZjhkYmI3ODdiMDFkNmFmYjBkMGZhNmYyODYifQ%3D%3D; expires=Sat, 27-Sep-2025 20:29:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":890,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"63d11c32c0a84e7d9f48ce68d63eaf73","sha1":"17e173ff2e8908f96aa9c2f7643cb56daaad5b7a","sha256":"aae6f79424314e4baa275d6956cb22754fd28444e43967ff24d4563bbc041874","sha512":"d7491364d065e2e45d1974654de90546c9f3ad83d9605a4daf7ff23bd61377d75d798767ef5e6fa3ce5720d219d520d8820c5f03aba27dfca72b95b6fb4e9272","ssdeep":"","tlshash":"3a1129fa2ec441bad59c12c10487f15c5a8e6223aea20e25e9c43dccce2d1f5a80f153","first_seen":"2025-06-29T22:07:49.332898Z","last_seen":"2026-07-21T23:47:26.494929Z","times_seen":26,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:12.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:12 GMT\r\nset-cookie: angela_session=eyJpdiI6Ing1VVVNYWhBWnlaYmlwMkhKa1wvYzh3PT0iLCJ2YWx1ZSI6IkhabmgrV1d4SUZkZzArSVwvc1wvQTlRMTJlVTg5eXRxRGhVaWpRZWhBVnMxNmt2VHFJd01oQjdCb3hmVDJsQ29uXC9RSVZSUTI4Z0puTVwvYmJQeWJOQmVxXC9zRkI5RDdoblBMWG94QnZWRDEzYVR2Vlh4QlwvS2JEUUtsMXpMTkdPM0VVIiwibWFjIjoiM2RlY2ZjNDVkYTQyN2M5Yjg3YWFkZTFiMjc2YmNmODllOWNlMzk4NWZhZTQwNzEzZTdiN2UxYjhjNzU2NDg4ZiJ9; expires=Sat, 27-Sep-2025 20:29:12 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:19.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:19 GMT\r\nset-cookie: angela_session=eyJpdiI6IkVibUVcL0xmTnJ6dFwvMmQ2WWlPYXBFUT09IiwidmFsdWUiOiJMQXEzMmpIZUY2UGlmbytuYjd5emtzeEN6dm1VVjMwMjRGbjh1N1d2TnpseGVDNWdUajJoeGlWbThLZlhUZUVsVUtFVzJaZXdKSDE0bkF2Uk0rZ1Q1N1lVNGZXZXo1VHlxOE5Xc2hTQzMrQ2UrbnhDRlJ2aFE1R2xwK1hmVHBBYiIsIm1hYyI6ImU5MTA1YzE5YTY2NTYwNzUzYjc1ZDM4MjE3YzdhYmJiMjQ0MGNlZTllYzA0YTY0OGE0NGQ4NDdiNjk5NTk3NDgifQ%3D%3D; expires=Sat, 27-Sep-2025 20:29:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:20.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:20 GMT\r\nset-cookie: angela_session=eyJpdiI6IlNFdDVBaEIzSys2WjhpbUY2MnU2YVE9PSIsInZhbHVlIjoiUkQxZXFxVkQ1MmxpN0ZnS3FmeXNjUENMWVJhZXIxMXJcL1BzN3Vla05Oak9CMlhBTkxVOUFzdWZlRnN0WU9aQ3l5dE12aEpsNWdNMlRTTUt4cUJsNHhETk94dlwvSGZxUGxxOXh4XC9SODVNZGNMcnB6QlhQSlRKSEpaTjhqZ0pPNjUiLCJtYWMiOiIyNzY2YmYxOGMzZmNlOGNkNjI0MmU4NmQwNzcyMjMzZDExNGIxNjk4ZWFkMGU1OTE5YzBhZDVhNjEwNTQyNDZkIn0%3D; expires=Sat, 27-Sep-2025 20:29:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/common/index_chongbi.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/index_chongbi.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-70b\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1803,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 49, 8-bit/color RGBA, non-interlaced","md5":"a036b37df2e76a5a790421bb35cce86f","sha1":"4e96453c63d7e7773ed2b40792ce5b076b1799d5","sha256":"ff05f0c4d865e5caedaa004bec00a522cda27c33f0c7c19853a9d0c6a9f68085","sha512":"24c5e79c60b494c03a822ab2a678e06a028e1d5dc97717503de79b8b0197e378b77e43af936ab88ec302362faeb240f89a5f3dcaf3e82ecdd74ec1ec881c282c","ssdeep":"","tlshash":"03310b65e951a1b2510ab56130f64413eda104c0fed06053eeabf01b2ca51fa3d351ca","first_seen":"2024-06-28T12:01:58Z","last_seen":"2026-07-21T23:47:26.498012Z","times_seen":85,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/js/pages-assets-deposit-charge~pages-assets-deposit-index~pages-assets-index~pages-assets-record~pages-~49d143e3.a3eb3550.js","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:01.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/js/pages-assets-deposit-charge~pages-assets-deposit-index~pages-assets-index~pages-assets-record~pages-~49d143e3.a3eb3550.js HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-d87e\"\r\nexpires: Sun, 28 Sep 2025 06:29:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55306), with no line terminators","md5":"6e4532eaf6ec77925af5e35fe0c5b1f4","sha1":"e052958f30300174f4f9a107c8c573814d24c53a","sha256":"1cd9f24e443cac084289413cd3f15772185c4645e4c50e6f7c863b28a9c14fe4","sha512":"7c835e80ffe254ba37c684ff468af84388bdecf61edcba24a7acfe5d1004e6172c524af82a6e4ab1cd5fe64aad9031929ef6deea957d5677583f55be8f25b63d","ssdeep":"1536:dHFBsYId0FHoMqu7NdEAaM2Ol51hwJX2RcJZHYpN7xCIx/+eJF4cL3nnisGQaOmw:dHjsp0NVr7fnaMj51hwJX2RcJZHYpN7n","tlshash":"b443fbe6e10c1cd17f7bcc8f6240235f6549ff62d9968dc8f126264c8de27a021a977a","first_seen":"2025-08-09T14:42:28.317135Z","last_seen":"2026-07-21T23:47:26.493842Z","times_seen":14,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/set/lang","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:01.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/set/lang HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\nallow: POST\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":997,"timings":{"blocked":391,"dns":100,"connect":144,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nset-cookie: angela_session=eyJpdiI6ImVvdDhsTEU3VXNoa2k4XC80UmxnSG5nPT0iLCJ2YWx1ZSI6IkhWRUo4cmp3ZkVUS3JsOEZWU011Tk00K1wvZE5SeVVZd1c2bnVcLzB0SWh6Z0hiT0ZwQk5kVG5xZTNPWUtlS0JWZnBzdlh4c0RpNXNxZmtrR0FocFcxb3F3cmFyY0ZXRVREbnZBM3MwbTM0SzhHa3Aza2ZnMEY4VVlrdGJ0WjdsQ1UiLCJtYWMiOiI3YTdhMGZjNWI5NmE2MDdkYjQ3ZTI3Zjc0ZjVlNjAzNDMxNDM3N2UwYzZiNmI5MWFkOGYxY2NhODQzMmY5MzEwIn0%3D; expires=Sat, 27-Sep-2025 20:29:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73446987a0839f5ea608c74ea2ed0f5b","sha1":"ba6075f42e5307059b65c29dd73cb6eaf775923e","sha256":"13e63b9ae8322b060e04a608d85ac31190722ac691aeecc3d27f83070a74e510","sha512":"9c04bae91caa847db359348f322afad90cafffcefdf380c6f657b26643304b8118b38bbfe398b14a38fe0e0742a332ad1aebbdb2c9fe39e1be9614aa5186bcd2","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3mFjgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkx:/ACtuaxbV4jOvHOfHxa6+P7w","tlshash":"5912a18d362d9a7cd6b67ec1dadb369a3551700badc24f41c3ed5f88038557ba20b502","first_seen":"2025-09-27T18:29:29.938275Z","last_seen":"2025-09-27T18:29:29.938275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/common/index_tibi.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/index_tibi.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-6eb\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 47, 8-bit/color RGBA, non-interlaced","md5":"037e3bb5cee009df691f1b9e55462c8f","sha1":"6aeaa92b5eabb1ace1e2e8bce895ac3138a9e4e1","sha256":"ba1eb8c6d4d0a73f8d55093a38306f8cb1ee30f83eb7f65ce6a7a14172acc720","sha512":"9949037646a9e29451639c77f5f4ca9ed30746629af627422f1ec41c6cd5c7482540df7fb4ad098c6a13e64506e4bdcb867d679cd53b2d1f73bf3398a317afa2","ssdeep":"","tlshash":"6031e64ee801a882815ffd4124ea4153dd254500c8f2f2ba6deea450383a1f14e3ddc7","first_seen":"2024-06-28T12:01:58Z","last_seen":"2026-07-21T23:47:26.488371Z","times_seen":85,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/favicon.ico","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:03.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:03 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"67d182c8-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-11T13:00:38.551898Z","times_seen":318454,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-27T18:29:00.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:00 GMT\r\ncontent-type: text/html\r\ncontent-length: 781\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\netag: \"689ca36e-30d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":781,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (500)","md5":"9264c497014fadcf254fd21f38f15e26","sha1":"52977ad7866c6de42f45ffbdbac49da40d260681","sha256":"e48bebc6e8938cd6cbd3569f322909c8b75aa8cc51c1c27d78f26c78be677175","sha512":"450b5adb01f52a7ff3a383eed6437fd8ef97e3be746fd4409123b6cdcb8a6054318fa6d5482cd5ad3449029a2c274f825bd37b75d576ceb9e6a43e43293a6aca","ssdeep":"","tlshash":"2801f6c21c10e84d072086512477d11e89d649b46991c9503cdc6aec8be0b8dce7f811","first_seen":"2025-08-27T08:42:24.758997Z","last_seen":"2025-10-31T14:28:29.402932Z","times_seen":9,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":289,"dns":1,"connect":143,"send":0,"wait":144,"receive":1,"ssl":146},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/lh/send/get_recommend","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/lh/send/get_recommend HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://sshort-market.co/\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/lh/send/get_recommend","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/lh/send/get_recommend HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"216383716d804488f71f7837d92db335","sha1":"03caf07e94db10bd3fcd9357a229782d8d11781d","sha256":"94d3e19eef51b52f43d0695296c9622a2c507ebb696e5c130703a6f46437583f","sha512":"63c2f0245e090fd11dba5daad1b6e90a8fb1f8f0e817f67e37742bc4bfdaf57212424c48365042c83592a180c93ab0c999a95e8462b9f40209555de5f8959ffb","ssdeep":"","tlshash":"5c80040035145c1c470515c134443c40414d1143c04115110c44dd14c35d470313173d","first_seen":"2024-08-19T18:56:08.011824Z","last_seen":"2026-07-21T23:47:26.515588Z","times_seen":108,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/wallet/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:03.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"POST /api/wallet/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nContent-Length: 14\r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:03 GMT\r\nset-cookie: angela_session=eyJpdiI6InNBUjFuN1g3aEZCUU0rZ0Y1UHdYK0E9PSIsInZhbHVlIjoibzUyVFROMlwvMG9yd0ZveHRQNExrOUhBWjUyM1VhME9ycmU2dFQyS1QxQkl3N0s0a0ZURzlLVUNMa2lkODdySTVkT295Qk1PNXRQZENvMDJKeWRtS0tpRjI3N01tbGRcL2xEZUN1NW0wRUJLYUhZNFN2eUpnZUFQUnhLczBxY2UySCIsIm1hYyI6ImYzNTZkMGY3ZDFkNDNiNzI5NWQ4N2Q2Y2FlZmRlYmIzM2FmYTIyNjljYjJlNzUzMjg4MjcyNWE3MTdkMjA4OTMifQ%3D%3D; expires=Sat, 27-Sep-2025 20:29:03 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fe3bffb102b97026f6ed42b5c8a62545","sha1":"1e2d5c82ac55d1cdd8c5d3324680a65133756953","sha256":"f2c2ab6ee8c91f7399343220b8f214b11391ca69378eaafe6b58fd36565fdcdd","sha512":"b795e40bae4605fda3e97790dc96e4527e333f69d51d11b922f933a055f1b69ba061ba92e258ec7f4c7fbae1b1fd965f3d49134cee5b6523d6ed72206a1bd1c2","ssdeep":"","tlshash":"0b90024a01006c1413060052744820104a80145181c16116142d443c51a9c08278221a","first_seen":"2023-07-20T17:59:00Z","last_seen":"2026-07-21T23:47:26.51451Z","times_seen":150,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:22.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://sshort-market.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 18:29:22 GMT\r\nset-cookie: angela_session=eyJpdiI6Im5cL0lzTWVkRU5UXC82TGhlSVRFRFgydz09IiwidmFsdWUiOiJYenVXeUJoZ1p0YlJsRlNPSnIzTlBwbzVJcGtnWDlvK3kySENtNDFnUFhqalRVTlJrdEFISTFac3VvVlRDYkQ3SHdwN1hwZ1ZKck1jZjR2b0lyc2hLXC9uKzllT0JseFAyUndOMmxIRnVuQmxVSkM1aSt5Q2t6V3N3cUwyanZCZW4iLCJtYWMiOiJmMTIyOGUzNjgwZmE5Y2NiOGY1NWM5NWJmMmFhNWZjN2Q1MWU4OTJkNWNkN2ZhMjIzMTg3MjlkZWZlYzc2YmQ3In0%3D; expires=Sat, 27-Sep-2025 20:29:22 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1956bb76876f878ee673724afa2f50ba","sha1":"ca0226c0a47676f088e07003177e4dd80ad00202","sha256":"4e6ed3c7f73d1d624317880ec7b5ee3f4270d9b43a5ba92a8d894d14e9bedbe3","sha512":"c13fe251bd5aeee986e8f019f2fce9780045ff28aeaadb4889df99a0bbc730c0975bc3e9369d4dee593240203ea9da14104e72b23579175ed78a4cbf11568234","ssdeep":"192:1JACtDAkstayANmMbHASmmWA3m1jgA5mX6A5mcRAtbosDvAnm7Hey3AkgX6qAkkD:/ACtuaxbVojOvHOfHxa6lUNw","tlshash":"0812918d362d9a7cd6b67ec1dadb36aa3551700badc24f41c3ed5f88038557ba20b602","first_seen":"2025-09-27T18:29:29.925929Z","last_seen":"2025-09-27T18:29:29.925929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/img/bg_dark.83a93ef2.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/img/bg_dark.83a93ef2.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-12c39\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 238, 8-bit/color RGBA, non-interlaced","md5":"83a93ef276bd4d559bd024bef0f84dd5","sha1":"1a2e3e4675b4fe09899f741b389f3fdb51c4bc40","sha256":"cbb3606ea77f33898c90df41f20bd06a1c4fb22898e22c26e9f34b8f3dc137f0","sha512":"70bb3a4aa3249bad4d1dc0ef0a374b55e676061ad16faa7b68154c45143d865cd9eb4bab5b5926f82dcdca25b234ce213e8e06a4434658cc4af803ff85d5eb5f","ssdeep":"1536:sm52a2JRQSf7ZjZ1I5CvKWZHU+0Gi/HtH0ahddb0+07IJQ0OXMUpOxhUERH:/2au1I5C7RU+0GiPl0aBot7IJCe","tlshash":"e97302552ee1fa4d2578d060b2c9cf3799062d2366e857a8f365c2970fe8e801491bce","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.504152Z","times_seen":123,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sshort-market.co/static/images/common/icon_setting_dark.png","fqdn":"sshort-market.co","domain":"sshort-market.co","tld":"co"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sshort-market.co/","date":"2025-09-27T18:29:02.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/icon_setting_dark.png HTTP/1.1\r\nHost: sshort-market.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sshort-market.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-656\"\r\nexpires: Mon, 27 Oct 2025 18:29:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1622,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 32, 8-bit/color RGBA, non-interlaced","md5":"ca68cc399d60093b386e8d5fcb2b5ef6","sha1":"bc4ff334d8a40bb63cd00f8529f4ac4e77afb56b","sha256":"f34fc59e62595af51e0a5bea774ee3311b07d6b800350cb71a5227b74f75cb35","sha512":"1f662216011f9a38f2a64dab66d59cd28565f3d0d7eac78ada932aa7744708bc3a9b1b821b3b92168e529feb9d4b77515584ceb4cf955b447305280c96dbde4c","ssdeep":"","tlshash":"43310ac9b040a3c07a9ddae221ee001bdc738a82ddd2f53178fe50190d111b2504daff","first_seen":"2024-06-28T12:01:58Z","last_seen":"2026-07-21T23:47:26.495822Z","times_seen":85,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-27","alert":"Phishing Block","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-27","alert":"Phishing - Crypto/Wallet","trigger":"sshort-market.co","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"sshort-market.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}