{"report_id":"3ebe2957-4477-4936-8844-eab46e317255","version":0,"status":"done","tags":[],"date":"2026-08-20T15:44:45Z","url":{"schema":"http","addr":"tmtm-kh.com/","fqdn":"tmtm-kh.com","domain":"tmtm-kh.com","tld":"com"},"ip":{"addr":"3.33.236.10","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"title":"注册 / TMGM","dom":{"size":154745,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34582)","md5":"e73334efd678758ccaa2ceb25d2b21fe","sha1":"20d9220a9950e3cf55348026fe65708f730ddf2a","sha256":"9725889aa1582aa7cbec03d5f906b2e9e43b41f441776d812ff0bd8a97a86993","sha512":"9feb2cb752053b522a348639c946967b06f4ee5df4f66879456de1f19eee6be31652bc51eeb5a0045d880d453cee44b25cedfdf3c1e86cf43a9f6c08cbd7335a","ssdeep":"1536:DQk1AouP3EtxU6XwwhWIwJhtoEULzdCXOIIhtipjsi0R/fxhc8yjaQ0s/EpOhUhw:uKPNhvzBcNdhh","tlshash":"b9e39a1063d9657f03bf96d47cb27f4659a6e309c11581c398a84b2f3fb3c3ab846269","dom_hash":"domhashca40f323787bc6b1ddd9b237dd196e31","first_seen":"2026-08-20T15:45:01.598187Z","last_seen":"2026-08-20T15:45:01.598187Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tmtm-kh.com/","fqdn":"tmtm-kh.com","domain":"tmtm-kh.com","tld":"com"},"ip":{"addr":"3.33.236.10","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-24T15:44:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"tmtm-kh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-16T22:33:33.289447Z","alert_count":0,"request_count":2,"received_data":977044,"sent_data":980,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"analytics.ahrefs.com","ip":{"addr":"104.18.39.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-11-25","domain_rank":48245,"first_seen":"2020-05-06T23:41:55Z","last_seen":"2026-08-20T07:00:27.82247Z","alert_count":0,"request_count":2,"received_data":7966,"sent_data":980,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-16T22:53:44.913224Z","alert_count":0,"request_count":1,"received_data":2045,"sent_data":1843,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ekr.zdassets.com","ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":18657,"first_seen":"2018-06-13T23:52:57Z","last_seen":"2026-08-20T07:15:00.1275Z","alert_count":0,"request_count":1,"received_data":3331,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"static.zdassets.com","ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":16846,"first_seen":"2018-06-23T22:11:55Z","last_seen":"2026-08-18T00:35:04.843891Z","alert_count":0,"request_count":11,"received_data":1272711,"sent_data":5221,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-08-16T23:40:16.580041Z","alert_count":0,"request_count":1,"received_data":613,"sent_data":1848,"comment":"","tags":null,"fingerprints":null},{"fqdn":"o.alicdn.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-06-25","domain_rank":89234,"first_seen":"2021-04-29T02:52:24Z","last_seen":"2026-08-13T22:57:50.237177Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":494,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":5,"received_data":153900,"sent_data":2775,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tmtm-kh.com","ip":{"addr":"3.33.236.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-08-11","domain_rank":0,"first_seen":"2026-08-20T15:38:05.738916Z","last_seen":"2026-08-20T15:38:05.738916Z","alert_count":1,"request_count":1,"received_data":274,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tmgm-prod-resources.s3.ap-east-1.amazonaws.com","ip":{"addr":"3.5.214.245","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-06-24T18:54:14.321988Z","last_seen":"2026-08-20T15:38:06.435226Z","alert_count":0,"request_count":3,"received_data":105697,"sent_data":1893,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cevents.chengcaiapp.com","ip":{"addr":"172.67.152.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-05","domain_rank":0,"first_seen":"2025-03-19T00:03:35.587033Z","last_seen":"2026-08-20T15:38:06.526376Z","alert_count":0,"request_count":1,"received_data":1226,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":26283,"sent_data":609,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tmgm.zendesk.com","ip":{"addr":"216.198.53.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2005-05-16","domain_rank":0,"first_seen":"2026-06-15T12:16:11.569158Z","last_seen":"2026-06-15T12:16:11.569158Z","alert_count":0,"request_count":2,"received_data":4616,"sent_data":1099,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"portal.fxcngold.com","ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-20T15:44:56.398483Z","last_seen":"2026-08-20T15:44:56.398483Z","alert_count":46,"request_count":46,"received_data":8859968,"sent_data":39915,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/useCommonInfo-BMnwy2eO.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d8b5ef45589a4bf8693433a353df0da","sha1":"983484f1bd740469c886a0095b6eb5b8726cd3c1","sha256":"c632a24f8bdd45d04eb5788002d040064e2dc13682dc0d23dd0c62a253e35a91","sha512":"6fa1c383747984acb8ea9ed25becace766711bf57ed95cddcb3af4ea707ec4c96bf5eda52299506dd46da3dd0eb069e81d385a2ad4a7f62e36c92dacdc332cf3","ssdeep":"","tlshash":"14e0abca30c79071839c68db459a2722232dce64295c87d5e15946f00e27a41c36ff59","size":409,"data":"","first_seen":"2026-08-20T15:38:15.909122Z","last_seen":"2026-08-20T15:45:01.658407Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.ahrefs.com/analytics.js","fqdn":"analytics.ahrefs.com","domain":"ahrefs.com","tld":"com"},"ip":{"addr":"104.18.39.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"661ceae031b0d59dc2f3beeac0ae7cfd","sha1":"3b7e9107ffeb21d0c41bfdeef7118ea9d58be07b","sha256":"b270afc5f9df7bcd9239c22857fb1511bba1398a28b1c3548272d720cb433c62","sha512":"b9630a50fbf1c6db29b47246715f640bdc24ed2d268627305989e615be4999fac0d8cbbef4336c2bae701eef903554954566e8dc23a6d623ddf7cfedffbaa062","ssdeep":"192:04fDU0pA7KQisEplEXQI5AuTYafgbNCz1Rx5NFKtiF:jfDU0pA7KQi3plEXQI5AygpC1RnK8F","tlshash":"c8e11a9c723075790877ada1e5ff3743f233a563a881e0914219dd802dac98f42abddd","size":6947,"data":"","first_seen":"2026-01-07T13:13:26.365481Z","last_seen":"2026-08-20T20:40:10.67126Z","times_seen":13851,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d32fc4f2adbbb2763a2431d1fb2d4d7","sha1":"078c8131a9449dac0b4d8a7cb49995068c6b0d72","sha256":"d310692378b72ac6dfe82fd7d32a3fc86187f620c703a1674dd89ff43ecaccd3","sha512":"149c0497763c1f25379f7295df78fcc43e40908cd90dee75400d555ad0d7287a8e38d0c95d6b404287fa5c774f4975bd23dffe663b4c8b7a006dc908e04ea82b","ssdeep":"","tlshash":"ffe0ab1a2c2fb4722bb81aa8e277891930d51202268226a5cb87d8643d71cca68c6a4c","size":423,"data":"","first_seen":"2024-12-11T15:34:05.761307Z","last_seen":"2026-08-20T15:45:01.69228Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf57eac9be1409b58f0001867c7e9df0","sha1":"a9cde6dbd85783433cf60dfc4a478f18e9f9afa7","sha256":"4a87eaab2a3f103831e9eac7310a913190a7869fd6a7dc6229bf22547ad3402e","sha512":"2590a3f3dd6142ccaf9d3ca65ebe6b3e4521a1f9936ed723e8b6f513ef3272aa015a19ecd42af14e8d621cac2130e4d9fc7c3a5651f0e30f4bec48a3675193fa","ssdeep":"","tlshash":"a3e0a3191c2eb46217b419a8f237851930d9130135422655cb97c4643930dc954c5e4c","size":422,"data":"","first_seen":"2025-04-16T21:47:50.456041Z","last_seen":"2026-08-20T15:45:01.692916Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9aca6b9d747f626172cb5dbff41a38d1","sha1":"7e484434a4faa249a8e9d6df28ccd4054ee74966","sha256":"6b710bb0d815a5ba5daebf0cc4e8d2d69428c59c55a46e795d753489513a6363","sha512":"c4543d6f373c06b0a9814d2241bab57b636a531df8593d73b212da0f2fe2b69536dd8ca976bfcce537877457d0ed5a0a7d68fafd7887db26cb2033a3bd011f10","ssdeep":"","tlshash":"0de086693f10a53d2a3f0b4f24f4f910f772131814d0d0e804cdee591629bd919d32c4","size":318,"data":"","first_seen":"2025-08-25T09:00:26.641739Z","last_seen":"2026-08-20T15:45:01.693802Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e95006c9392067f81e6cb1b2d72b9d7","sha1":"2c493756b1a2e9971cbf9a16f7ab77148c319c9a","sha256":"7da739b348ba0d5a95cfed8735f78647c9f55989c422206292c7a04a0357aebd","sha512":"51c1d16fbd1c1a35374eeb1e8e8ccb6d79ffc0b25ba49b455e82cbc43c555b90bc8651f6567ef12de1c5bb613433a12e9eaef9882dd32300ff697082b261df70","ssdeep":"","tlshash":"29e0a3291c1eb42127b81958f33b891630d9120225461765c787d4543930cca54c5e4c","size":423,"data":"","first_seen":"2026-01-13T01:41:47.823666Z","last_seen":"2026-08-20T15:45:01.694583Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"45ff067323d7a6a65d66fe27b6c41923","sha1":"d1cdc25ac5afe8122e893acb082443b70da21146","sha256":"43d88974f73c7d66d076c10171eedaf4b1f4013992b882e2733c6eea1385ba11","sha512":"3a8fe1b7a8ce4fc0bdfa735588ea61789dd2d47ad29c953681afb83757ce1fdf3097057058aac01ce70693f7151027831555646f11e1d38e9f1dafc905ecae0e","ssdeep":"","tlshash":"bce0a3191c2ff4611bf81959e677891630d5130135411659cb97d5643930cca54c5e4c","size":423,"data":"","first_seen":"2026-03-30T20:50:59.363992Z","last_seen":"2026-08-20T15:45:01.695301Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9639d95ba7c314b0d31590201086291","sha1":"d9a394676c4a2b36de3cc890cc161a84cd26e6b5","sha256":"44f4e7089c3012eb0dfea7dde0aa25820771fb61970a6f488b0c174cfb302e87","sha512":"56c1284fb81f0673cb3d373df0b00fc2925bc20f712cbe81ab26fdaf869a974dc6a218cbfcef3def1a3b2d573675adea28d79ba020348be448b006d7a90ee501","ssdeep":"","tlshash":"2de0f11e2c1fb4622bf42aadf337891974d5134235862aa5cbc7c8643d71ccaa8c6f4c","size":423,"data":"","first_seen":"2026-05-02T02:28:32.00509Z","last_seen":"2026-08-20T15:45:01.695984Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/captcha-De9rLtIA.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bc8f78ad53d25e37778bf618c71b93d","sha1":"74f1045e49fb2c38fd202317b2ccf22b87815c0e","sha256":"ef191fcf2b1f9fff7e9cdb28f1050b190559ea6df17ea7978095ed5e8414872d","sha512":"bf9d68b72cf09e16f29982ab7447a38358a8939e702c0e05badf70ac678e66f3eb25b30484720cafc640e88921ac668267a627266e9168d900f03d0f10702f65","ssdeep":"384:rMAIkrm3/tkgyDg1mxbL0xO5/mLoYHkqyTS1DTe+eksJJ2Ec8iiDQUbKPtdBxlt:AHJGL0Q5/mLogkpTCDTe4sJWJaKPtjxX","tlshash":"24727458f35a5aed0a3ab526c52f0603b126ec17ed1c84547fcc79f02e5ad075232eba","size":17342,"data":"","first_seen":"2026-08-20T15:38:15.853006Z","last_seen":"2026-08-20T15:45:01.645888Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b35a1c94aca764d5090b197d2b9d1227","sha1":"380e300d9ca5fe73528946d29ed11f79417a4750","sha256":"f9ae6471f0ada6d87a45ef928efbb19cf357a7775d36aa32d1635febdc5d2f31","sha512":"265fe71c5a519d1357514e78ed043e97fef35f65bf60a806155513aff9fe823b74a64a528129f51d0fe02c48c1053c3f67a60d6ba36aa0aaf31613aaf91cc5ad","ssdeep":"","tlshash":"ade0a35a1c1eb4211bb41d58e237991534d5130225411a55c7c7d4543970cc658c5e4c","size":423,"data":"","first_seen":"2024-12-11T15:34:05.799593Z","last_seen":"2026-08-20T15:45:01.696686Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"402d9707a87738871e2f12ef06dd4a4d","sha1":"5cf6385c6386fe4ba4957ef239510d50576f25fe","sha256":"bcb66ea448cc5aac08757bc8fd1ccd154ef8a243b2de4080c36caaad10b11f87","sha512":"075c1992422cc32caac0056d0a6d0d2fe5c3980b9eaf474cc3a5dae05aee2eb83bb474625bf7999ddda20695c33bf374652d18615acc14b31a54e281e70db046","ssdeep":"","tlshash":"12e0a31a1c1eb42217b41959e637891530d5130225415695c7c7c4643930cc654c6e4c","size":422,"data":"","first_seen":"2024-12-11T15:34:05.748369Z","last_seen":"2026-08-20T15:45:01.697334Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3ebbcc6e050e480474811cf7c3174bd","sha1":"bac8e43fa15e6c773a0311af2b2ad87c0d4c7ec3","sha256":"f8f9d49b84dd03499c8ec2fc82fab8cf07b10ea9696f9c1918c10dd350cf4c89","sha512":"6aa73c34b6992e422b75815120d6a42283b4ac2c33ba6a39314a3d650aed8860d4ac210c21120235e22486a7aaece37fbe9bcfa7c59d9209056f8a6e6c6e9b25","ssdeep":"","tlshash":"1511142d3ce76818d60e9bfa369f978d2077b8115d40cd90c18dc094b555fc910a5bbc","size":926,"data":"","first_seen":"2025-04-16T21:47:50.464127Z","last_seen":"2026-08-20T15:45:01.697958Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d5dd21d4ddeef1a939dd14d00de4a89","sha1":"98bc4c3c9b31b0023a0710eef1f63944cb674b5f","sha256":"fc037aba0c0d966354183f0dc115f19257949de4e57179b9d59dd4098f457118","sha512":"fd58c9555fc1fe91c2376d0e17afa179f4287e850ff1569cd0644d1500a33bb79cf8d522760b63c6d0a0c89bbe48f905c6cfe055e2a65dfc4afb18ea1caa7103","ssdeep":"","tlshash":"65e0a3193c1eb46127b41998f277895530d5120125422655c797c4543971cc564c5f4c","size":423,"data":"","first_seen":"2026-01-13T01:41:47.809635Z","last_seen":"2026-08-20T15:45:01.698593Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/startRecording-DJ1pXEeY.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c43ff441372bd07d1f1f326f0fbc8ab3","sha1":"43a19b0177f00cd5af2346da5fdf680cf61ef240","sha256":"116f5146b27f695306c86e6f7089a49d4727554eaa4dca93d7393f3123b6da24","sha512":"00f442def9abd3de132d8f82cfb63810fda177860763a2abbfa89bdd713c077ca0acc4ec7afb6f7b7bd49359256c7d61110770507689d0a9232cf16ebbb2a5a7","ssdeep":"768:eJDLRenTB2JdbgPO6vK55D3tQDY+3fm8wCfjBzNH+ZqbEMNX1fExZMNTbOOOwDki:Yq2gPsvd2mdCfjUqb6+KK3ye1","tlshash":"94c209ec72c939b367d64ffa50bb00817b701440740e4990e5adce9b3e7606662a7fac","size":26397,"data":"","first_seen":"2026-08-20T15:38:15.865031Z","last_seen":"2026-08-20T15:45:01.606195Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/AuthLayout-ixXRzbZV.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"74ad4a19c30fbb04d5cda137bacdab89","sha1":"809005e900b454dc132d9316918de0fc96b8756a","sha256":"b6aa551bc9c41ec06c2bc7669c6b03cac2d9c0bf41807416f8769499adeb5001","sha512":"792ec626265bf0cb4c0aafbb9277b28ef41499b42035da0b49cf25f53caa660707300f26e33178d9d6735ff443ef226efcba05b478d9111a0084f28412ef940a","ssdeep":"","tlshash":"14719889a84ecbbcdbb7515484245410760e2fa4e2a8c5d3f1fc5c2d3b46db5618e33e","size":3685,"data":"","first_seen":"2026-08-20T15:38:15.917643Z","last_seen":"2026-08-20T15:45:01.617515Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/validation-CyJc5o35.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"537c6e522b7717ebdb269a678d837880","sha1":"9ee6f762c0f05234d154046791cdca33e0c5fc8a","sha256":"0372a504292c8447732115671eada50397345374d537d20f2252ae2e74296929","sha512":"0ceb79ab304ebdef71e18f1758aec7a8ad70cb6cb5388445c797fa34a3e4b63de8816bce06cafc38212695bf164e657d47a2db60e03d77a8db0eddf284b28e8f","ssdeep":"","tlshash":"db71334ca6dee1b308bb29e4886900c5b334b95aa5bf8c31c155ae877f260edc7574a4","size":3706,"data":"","first_seen":"2026-08-20T15:38:15.882833Z","last_seen":"2026-08-20T15:45:01.63601Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/ThePassword.vue_vue_type_script_setup_true_lang-DsG1p99N.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"53c41d5baf6a5894c3229ef4b3974c88","sha1":"4ad37a6a019f976a68303376b2e6163553691a1d","sha256":"7385cb0e77b74cfbf2459817a0c2dab4b9be6aa336625cd56601a96dda0a132e","sha512":"3494612e867a46a93711ea1cf727b23278a30468792aedfe5cf90e97638dd99de43245031725dab16de5997df888db9631d3e62648257511268314827cf4de44","ssdeep":"","tlshash":"1e812387e81e8d73515bcdbc501344207205a67b82229984aeb9eb1d366bde2bb0a716","size":4017,"data":"","first_seen":"2026-08-20T15:38:15.822048Z","last_seen":"2026-08-20T15:45:01.619027Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/lodash-es-BeP-6yLJ.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"04f7b70be73ae2d0cbc95bff3b90d061","sha1":"12b2bcb6ebdc294f91458856901a10b32d3a1a6a","sha256":"acd64840d496365702039bef60098847d89ba7065c443d6c44f62972a001d5be","sha512":"125fcddbdb8d661d8e86d78bdeac50faaaa04ebe3dc3b453a167b521bd902afe331e8008cc2b76900f81a985e9f709bbf8cbca2241299d556f518272ac1301fa","ssdeep":"768:jsnvKqduZ9Lk5EDSd+Ki2ugGoDli2NGoesNrPB4DouJU:WpduZ9Lsrdw2ugGo5itarPu0uJU","tlshash":"a6f252c875c3f45543a66865407f088bf23c6e75a88ca180e19af0ed7d78a1ec677e39","size":35593,"data":"","first_seen":"2026-08-20T15:38:15.847225Z","last_seen":"2026-08-20T15:45:01.633033Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"db9b13c96195b5bb926361885cae8e87","sha1":"3cb57db5e9998a36cbe64d80ab4e5e5dff0d0fe6","sha256":"0b6eef8d99c9587973408fdf109eb449e1baf68f768f0ba08292a5f2a6eb4431","sha512":"4adb00fd0314df825d1c72bc82faedfb65ecc77c3ff87431170db91dbdbfd15d376c31d2607765efca749b1a08abab4416b9a386c5975515406f8707ae9f64d6","ssdeep":"","tlshash":"a4e0a31d1c1eb46117b41999f6378a1534d51201258216a5c797d8543930cc964c6f4c","size":423,"data":"","first_seen":"2024-12-11T15:34:05.784425Z","last_seen":"2026-08-20T15:45:01.69964Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9083bb6b1d2da06aad22fe533aaa264","sha1":"39c26b145d3a4dc8d5ba0c837f9974e6c326d8d8","sha256":"f66d274cf696e72c5558554aa87552dd3556bd68f627d93fc558d0e134b732a8","sha512":"9bb940bb5c5abee53c39907a0d5d6088fe126165997b7fa8e89906737141a1a32495f7531fc664aee001f2dfbd14a6475737f6449163a3a368e4378b439b4440","ssdeep":"","tlshash":"42d095bb34d010b66279c2f8b37f870c38a3120c541dda23f54684597534dd5044a9dc","size":281,"data":"","first_seen":"2024-12-11T15:34:05.765705Z","last_seen":"2026-08-20T15:45:01.700355Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18208205874\u0026cx=c\u0026gtm=4e68i1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96ba423c4673e9807d1ce215fb4a0182","sha1":"3df1ab2658dae4d05043499306bd4a7b78601c23","sha256":"3378936a321ba0c6e639d0018b425686d74dd192a31a32dca9e07d538a626fbd","sha512":"689d4ace32924be9ab1b81ff4733d50a98feb054584605ef6a288d6802ca8eb3e0b8e5a0178d6d68615a702d244c057c5e7aba93b653035e122850ec9e9986d5","ssdeep":"6144:8WEeTs1y9qc0HRPMD04d8Z4yfpBjcR8eaEBy3zdzYcdS417p1g:8WzirHtMI4ryYcFz1g","tlshash":"eea4f8cdb3d674629396b478503f018ba57a79e2b84cc899f189cce42e7469a4133f7c","size":454721,"data":"","first_seen":"2026-08-20T15:45:01.687473Z","last_seen":"2026-08-20T15:45:01.687473Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/useValidation-C6adAuiW.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c97114222c12b4b02f35109210b0521","sha1":"d521411e4bec9d46ed37c1e80df88ee1ea20b6bb","sha256":"1fd89ee7b0e3d8f38c93a16714cb653dd913fa1adde02eee688aa3419480b1e9","sha512":"406c114c0390b0797821e9427268b62acd879877e8c2d150468eb31eb13f55662e61e0119ed402b04c4d28e6031a9ebbfb55f0efce350e060eb25ee49831fa98","ssdeep":"","tlshash":"2171db88a286a6772df92cd8727cd0c3559e07906ded9c23c2e26d376676ed4ca1f700","size":3603,"data":"","first_seen":"2026-08-20T15:38:15.857153Z","last_seen":"2026-08-20T15:45:01.655058Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/zh-BTVhNlFJ.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"c3fa2798e75b1faafa6e25e5005a2a64","sha1":"7984a851f3986cd4a342b4ed10d73381c741547f","sha256":"45731fb902f1696580d4eba96f61fe29e2f14cc7ae962d86cff37603ed54af6f","sha512":"54023e15cf1081563894d1b31a808e8924f28699cfc7c743edd483f3007a82f42e34b8e1e368b79b7c108012661151c979b0d9bb6fd1991644241fa64ae15d4e","ssdeep":"3072:rc91ygGbP38+a+RPreOuLX3apjHelsVRQ2aM072hDhFvO6nWdEIbwnWZX965grV2:r7gaoErIjNYvRDh06nWdE0w9d/ae","tlshash":"58346c1a8deedece08876255bf4f2304307e2941c8e98c18afe54b5c0698dc77ad7796","size":233527,"data":"","first_seen":"2026-08-20T15:38:15.901416Z","last_seen":"2026-08-20T15:45:01.62325Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=04eb2d06-328d-4516-a883-95ac22c6c339","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2212d7d4bff592ce5ad0f95527713e85","sha1":"e982eaf7fdc71a87e03bffbedad8780ed58f4f85","sha256":"1da79e989f7ed098b77d20036920649850917664d9d5fc9f81e60af1f2767651","sha512":"c4870aa0742a4c023912637b9003ebd5b96b155e79db760265b4855355066541e72985d33df8d92f27e346651ffe459d2b57196efb158c17986b8f9ad4190109","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsircTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsTu","tlshash":"e912d8c6b1b2e47603a600e1603a9690f7651919360dc43cf97cecd6fd66d91863beb8","size":9693,"data":"","first_seen":"2026-08-10T14:14:14.654591Z","last_seen":"2026-08-20T21:45:34.609635Z","times_seen":567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-403-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bb6b1d655919a12ce6a1331872c8004","sha1":"7dcfdfdc39098407e44880ff7b08412de53426d1","sha256":"fea2f6c237de5432a918ec047b135b524c112fa20eeaca7a2130f69b4f2dc655","sha512":"cb24c83ea4faec302423f17a52102155634deedb9f0988c599559146da17a6f31279f678bfe81b411158d98ed474c174eb0e3c968f749133559cb4c57722efac","ssdeep":"192:h7xi0KjeqBhCw6h+gu8m3AhnyP4hEi0r5c0Dix+8Kr7UdEW4zzauc:hg0KjeqBhXguKygmi0hyYUdEW4G","tlshash":"2402c699b562b0a5c32375a5417f011ef33eac68718e40a8f2a5e4d96c3e45da273f3c","size":8416,"data":"","first_seen":"2026-07-30T12:48:09.905002Z","last_seen":"2026-08-20T21:40:04.789767Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/index-CiwMgkbR.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dbd7a59cf06e2279d875daab73a5b45","sha1":"fa81a122588de4bbf607dee3f92e345522866d90","sha256":"ab86586b31a8a76817248a6dc993ca5f60eb30110fc6591a3f77ab6610e8dd0b","sha512":"f731b7e2d0f1d195ce5d5f0f17b3453385cc44d7d0389be4a2a8b76d0bf201a4e0cc9fb4c21943c727f67f856f658fef36b4fbb64766d66f3eed55e6b692c74a","ssdeep":"49152:Tv5FlmD+mLSD4K/045WBjjKgxxkiSwnzLybuvMdC8XpNUb9WY37ZdzlAdqF54RG2:3LXio","tlshash":"144602f5b2c8b4f5465353b4f87b1405763c28a0b548c4c8e2ac99bd3bb1499897ffa8","size":5427945,"data":"","first_seen":"2026-08-20T15:38:15.948284Z","last_seen":"2026-08-20T15:45:01.701805Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"320f32419c833b964297a15e04af472b","sha1":"c73e930dcca5956fa762abf938283472818d9cf1","sha256":"ca1d260847c003e80518792c353354965412ea304be8b8a91525afb9398b4cb4","sha512":"832dc29c674fb405b49c331f2aef7760e01a72b646167bf2ae8396f1c28f5cbf5ea91ae7d10c0ffb459f6f0fc734001f66d507a25d36069a56b3298004b561fe","ssdeep":"","tlshash":"08c012ceb252649491b5a33a9b3f332c3922228047600af60a401c683a18d43e1533dd","size":191,"data":"","first_seen":"2026-05-02T02:28:32.010002Z","last_seen":"2026-08-20T15:45:01.702954Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/tailwindUtils-D_ovc0ei.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c471319d84388a0be8e61aac73b7b67","sha1":"2bf07e4b04043aae15f35145743576948af924fb","sha256":"d40de14a23a140dac1d3c04c55886f8597fac43e73382ce84754c158c1ced84f","sha512":"c4274260b4654dcf65716046bf820b0062b2da78b4898264a8e3ee2ff02c3aa6400027b434d5d80403af094db7566caa3c39b18e397042303cb73d7e38ddcf76","ssdeep":"","tlshash":"daf0be2c5732ee7414405cfaa4a08c938878a587d623cc1193cfca71a7ca8449a7abb8","size":530,"data":"","first_seen":"2026-08-20T15:38:15.820483Z","last_seen":"2026-08-20T15:45:01.65342Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/Lang.vue_vue_type_script_setup_true_lang-DzZ3Ab_Z.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"82901cb47a2e3980007e35b8a75bc7f2","sha1":"73602d03fc4dbae3cbbedc3fe4b9c661dca984ef","sha256":"a9efdc620bb72756d67ce6975af014b974035a9ff56f009ccb7ce9ec1cd8f2f1","sha512":"6810ae8f108888fdfe8beda21b86adaf4a5c80930f1042f14762c0dea2734ebb8d659462be562d03d961e782084978ca3308e44570fc5e610c9daaf2bb810331","ssdeep":"","tlshash":"e431764d3c8ac6f8b347206421108454a24a6f29cd78f9d2b2fb2d3977b3d18966dba5","size":1491,"data":"","first_seen":"2026-08-20T15:38:15.85625Z","last_seen":"2026-08-20T15:45:01.689667Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/subscription-B8-ZWy-T.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c9588bc63689cf5a3255c92b1b20c4b","sha1":"112bba9fea63b81848186f6669772c31951e0c65","sha256":"8931964cc7cfc63f20cc58d649aa91a8a091eb5c4b4470eecbe2e7a537d6cef7","sha512":"2f8bd0856c47196a6067ef7add0f0582e2e0ade5fa203d3a324f95d992c5baf710f662f44f362716dd11f36d76b29115e5458bc9a47297105df2ad740fef0e2f","ssdeep":"","tlshash":"2421c9057da2f571d6ef28a59c77c21825390f86c522c0d48cda5e362e88ec6ce6b92c","size":1349,"data":"","first_seen":"2026-08-20T15:38:15.850394Z","last_seen":"2026-08-20T15:45:01.678678Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"858c4430a33d22566db4740acb2cbe52","sha1":"23598dc09a828a03fdca01d44118686369b1269d","sha256":"dd73931be2042d04ca061d39f8549f5e299ce51b8b9429721a5255dc422df30e","sha512":"7fc37591e5ac3cbc07e63a3a01223cb6a5e587e06bc8452dac167e8e142a577571f29165044dd280e6382846027da6fa0e2a579ef11b5faebeccd81ed247985e","ssdeep":"12288:M0rLSdnjbqteAPD0GGX39+ADhJAftBlCMZJGqWs:M0rLSdnjbqteAPD0l++JA1OwGqWs","tlshash":"2ad47cd970d2b0661bf345e7506f2006b33939197c0d8490f698ec9a6bb848db1b7fad","size":606269,"data":"","first_seen":"2026-08-13T10:51:38.74408Z","last_seen":"2026-08-20T21:40:04.777161Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-931-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68346d6aea9edabf0ee588e2c5f4dcef","sha1":"e7783c4103b10658196ac4823c9f6e7998aadcb2","sha256":"7f76cb122858e9111555392deb3a473766ebdfa11cc17f450eaed386e4d414cf","sha512":"eee59e631a50bc813bbf02ad214b359c975546cc2e337e8b734ed6958792fcc6b65ef78e2d8903d7aaa4befae0056721fba9e741b5033b3f80ad2141e8e365e4","ssdeep":"192:6UJ3hoQ2n2IT4PSl5qaICFY635hGQVmp/Zo8pi54xnc+gPI/b0GSUWCizpUQmrFK:6UJ36Q2n2i4ql5qaICFY6JhGQgp/Zo8e","tlshash":"f322f81147861c3993e64ac534eb944c2b2f628cb41b42d4f27cbc6f83e69c47262f9b","size":10677,"data":"","first_seen":"2026-07-30T12:48:09.906144Z","last_seen":"2026-08-20T21:40:04.766596Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-1606-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"432decc07f6fa62e4a13766b3fed79ce","sha1":"fd842a41fb5d07b85d868daa3455a9003b92e03e","sha256":"43752091554c6a044be90a109ea4d76b6947e065c1a1f574f268aec40a878bbe","sha512":"4c68e4e302f2b86a886be610ce6987d4064a9547e647d498c2e34f9f91b564540e145d08cf97f851c43a9583e22d08f10b16c7126251455b190c1953b2f9948f","ssdeep":"384:eECZdF6jkPEiX1vVMeSKQH7BsawH9COjgCa5FBQ4mD+937nB:erZdZPEiX1qeSKQH7WawH9COjgCa5FBV","tlshash":"5972094d209324249e9b8ecda0fb116d233eb90c3c89416976bebcd607ee5d8315af56","size":17104,"data":"","first_seen":"2026-08-13T10:51:38.822049Z","last_seen":"2026-08-20T21:40:04.773115Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/useAuthFooterData-BtJo_o99.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f0444caea6f327b69089d528077e895","sha1":"79940aa2395a5c2c7379abca5c0d2aa59fe25fb5","sha256":"a3013d06762aa2109f7d1d4303b0418ef17a300638a61298b0d3ce61c7a5a4bd","sha512":"308c1c4b7cbdea6fd8996369e79b0f643fab76e24459a120f3eb7319d101f896db322a2054481083699f5d3e63d5a663f26ab525f7cd3b7eca02e28679e9ed92","ssdeep":"","tlshash":"a80110df31c9dbb8134614c28a001aa5a3052314ed5987ffe23e6d570b10428f3bf816","size":729,"data":"","first_seen":"2026-08-20T15:38:15.855242Z","last_seen":"2026-08-20T15:45:01.65185Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/element-plus-Bg1HnfJF.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b63567b834f754a672467d1fd11091b1","sha1":"8e5c372fe261aad611af0bea359522f61a223999","sha256":"6ea24e5566ab491935b95d4c334cd76ba132073f5b287cb783d79eda5b8975d0","sha512":"ec0125840d8a648b51453fb2e59fe08f4e2f207778bcc98072193fe1c2773aba42319ab4870c5930c1d23147dd44537d97bb02efc4a5f1c0c83d7037d6ecdb7d","ssdeep":"6144:rs6r6abYHpgRJxw6jkzawXSAqbnL3sR+Q6KBqOe04q5J8x5yHE5WNUAVtoQwONwM:rs6r6abYHGRJxw68fiTsHZTL20HoQwOp","tlshash":"e6f44ba8b559b47c57bf81c8407a0001672e5bdcb40988f0f1be8a78365bd64d1abfbd","size":757033,"data":"","first_seen":"2026-08-20T15:38:15.907222Z","last_seen":"2026-08-20T15:45:01.673461Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/tracking-Cgn0dth8.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0913f762324e7911d6327cf3d5109c31","sha1":"b8dc8f96c35205c66d13562590b5afb2c474f782","sha256":"a28a01dab46b862cf99ca383984c018b7ec070ceadcc8729c4ba53007566d0c3","sha512":"86cbfe8e8ce9fd206607a1dc7b65e29355ddb26583bfd9a9233f8b01a20805d974e9ff454d4230027697ce5ff0cd8f514b7fcceaff559ffa1d1f2579a049a9ee","ssdeep":"","tlshash":"f3815472301993e89add3da633f28f4bd1613a52755582ce952f9cd7e712e427cc202c","size":4042,"data":"","first_seen":"2026-08-20T15:38:15.842825Z","last_seen":"2026-08-20T15:45:01.669292Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/useDeviceId-FOWv4o85.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"567bbeda475dbc848cd9dbcda4279925","sha1":"e84f85a83d3e35d79de170be45dd5d2009154dd5","sha256":"f959c284fb275743d74343ad2e224f0556d3799595e876069cfd3bfc15547aa8","sha512":"045d2d0920a57f307ed38dd6f1773f334cee82b719af28ff192cdc43145ddc78354d147b20a130379ed979aa41d175dc49988623d46ddebfe5d14cf026029eb3","ssdeep":"","tlshash":"a7e0613672947177450318b9343e4e4d5326a10c2dd58c917e9697a74936075930afdd","size":389,"data":"","first_seen":"2026-08-20T15:38:15.910565Z","last_seen":"2026-08-20T15:45:01.629909Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-1261-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"27c8404bcf79c6e5c252efd08a44433d","sha1":"1761155445f85cd7398c110365bfc34837a9860f","sha256":"43fb23e965352b83a170f373bdfe2e1e7c257d09c86f962824345ea978728b0f","sha512":"2236fdb3f16937b0cd65e87b0561b9c6488d1859da76fc1ac3c64a31db9d60a8a7c0d9f9a3f4cf4805cd402d6456dfd75a4f7dd59326aff0038ec9afc3ba835b","ssdeep":"384:UJpiRM9BTeFSi2PShot0sil39Kkzio+AYWOt5AYih0cCwypytCY/0CXFgOeeQDPP:UJ+M9BThShot0R39Kkb+AYWOt5AJXCLn","tlshash":"a5621ae4d162b81927f7c4cc90e24a14ab696500b0174fe5f26f7dab437f8cc549ab2e","size":15078,"data":"","first_seen":"2026-08-06T14:46:56.388048Z","last_seen":"2026-08-20T21:40:04.853226Z","times_seen":222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-1313-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69f285ffcf7c5e83346d0ebdfc03091d","sha1":"1f052e85d75c5848758cf87d2615da4b87e4e98d","sha256":"79246b159b24559ed37454252d7d72b801db8925cc0dde5d3f494521bdac8069","sha512":"6c4a50c3cde63a60d8a80e6811fee72b57b304eca72c1407fdc4aeae14fba209949d7d40223b2a2707b06f5327505db06bd0062b044625e627d965578ca56db1","ssdeep":"192:1cCW6zr6f/M6qCJTkChFL8nntNIpF9VabEjSYHXo4Kzf89eDgB8x+zJOZzTxGura:1c96f6f/M6qCJTkCT8nntNIr9VabEjSQ","tlshash":"1a42fb5190aa287f23df45c93886981c362f2122b82e41f5f95dfd6a6aedd4d231339c","size":12229,"data":"","first_seen":"2026-08-12T15:01:01.47906Z","last_seen":"2026-08-20T21:40:04.840614Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"f656b74eb903a0fafcf5e2dd66041d2a","sha1":"4979a73a0bade3079bb4266c8ca507b6e1923805","sha256":"c817dc0d9f5200503ff3b36f46aaebe0d32d98e1e92cd42e07ae2c140a3f7b7e","sha512":"cb18cf1de8b55c818a736fe71c7da6da2c0db0a9b1bf70f5ce16ee9ef76690795667f7eaf2f596e2b4a5f0bb3923c783445e791b559a5e72d1dc9b0108a5ef33","ssdeep":"","tlshash":"5a014e9a1093202025b71095475731093066b0f7269ed1a87a1c46586f591ebc277fed","size":745,"data":"","first_seen":"2026-01-13T01:41:47.775972Z","last_seen":"2026-08-20T15:45:01.703669Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/baiduMarketing-BL6KkG-j.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3442ce09c96294e11c774f115e8fa8b4","sha1":"7b726abbd2c8f348dd6a93f63e6714f902ba1781","sha256":"34c66857d0c0c8185ccc77c744d115e8dcfa02eab53ffea490534f46bda14265","sha512":"bb4ee96d2a4ac061422071caf49e634c5e0af9a646739dc9f137e8ec7a7e1b6bf7b863ba563ef2a3e1fa8551b0a21d66285a363375f95c14500a3867b477342b","ssdeep":"","tlshash":"63219a2a2871e0fd03d2347eb63b4c12379129675b429064c1cc8885e903f5787763d9","size":1129,"data":"","first_seen":"2026-08-20T15:38:15.877525Z","last_seen":"2026-08-20T15:45:01.683661Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/index-BELjsqk_.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f12aa4fc0dd239317403a55ef2482c31","sha1":"0c5ef7e02961b90d7aaf1f8741866f5cfe9f9953","sha256":"368622da878222786c08311db0ccaaccd502abb72fbb14c0fca8c2ed62a0c41d","sha512":"cecd1882a09be3f648d8aab861ba2af5d1201190a91ae1d7708fc7a4630679914de5e9ea26f6ddad04061b08545f7e5f89b2e3fed399a3f5cea3b1ea6fd81972","ssdeep":"384:giA0328rZFz2BwRDmVcNA+QGVgZJfnlTHs6DHa8FcxvbH6UYOo4kfG87N81U6dfd:gb032yZTNA/vDDHa8FevbH62oDfG8O15","tlshash":"d9b22a4db521a5739bff4ab868229005637d4ebbd015a4d0ebfc0f6b1ebaec19607701","size":23475,"data":"","first_seen":"2026-08-20T15:38:15.895549Z","last_seen":"2026-08-20T15:45:01.625677Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/useForm-DQ9gm-9b.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"321ff632a02a3be62dec795838157f48","sha1":"947f6c8c3909eca38a016fd47e760d880b2d0a21","sha256":"a35bebe5a076aead2d38844985dedb649c5c5738c3bbc8e3da970390f87f17b2","sha512":"274b5ad2b8dade0012d3674f19b962b870286d71b265bad88d6b1bd1a8d65a8f632fc534fac57d2b43b02776958d0a1c2809662c65d68dbe9f655a17f40681a3","ssdeep":"","tlshash":"e7b09bc932e351b5591510ad716a855951492624254929429114555614588d04065705","size":115,"data":"","first_seen":"2025-03-19T00:03:45.205567Z","last_seen":"2026-08-20T15:45:01.690466Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/optionalLabel-DtJ0mii8.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"24b27cc45efaac8da10ed57398aa9f56","sha1":"4e610bb0fbbc0923ac5fb6639f4d6f85878838a2","sha256":"3916a84de8e2782f757e961ffc7f638fd55f9966e0a5080968a94ce39ea979be","sha512":"80b5d0c3a63f42802080d4d7ae0d99d030b14055580844ebe4e4b92a153acb098c7e6071d2ea4392725bdf278a011c72ae0c34c682939976780a67c45a2e3c09","ssdeep":"","tlshash":"e9d0a7467141f3798fc909aa702fb295e77aa40076c2c550517e12d2d5316574665d05","size":244,"data":"","first_seen":"2026-08-20T15:38:15.859567Z","last_seen":"2026-08-20T15:45:01.637484Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-7901-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"564b7cf01b6881bd8f08419ad39390c6","sha1":"92e8297788261aac1f5ac81dbcf2e64fd1f95114","sha256":"4bf50c15b67fa91b8d5cf9a6ba3623dce4571294e9bd38989d3ab77dc0dffd0d","sha512":"0295bc518d726576be5306e0bf4afb96c2b73a360ba01e9c6195b80bf0af4ece665f9b36116b2da933d6690eb333607b502cd8674728d96d907c30520c10be20","ssdeep":"768:XHOuFxLlUriN2IZz/zuOOMB59HN+RenWDCv4mrOMpND2j8yMld5XVVeBcsFY0D04:XvlFzjx+Eccza8HOFY07LPVUAe6y9bBM","tlshash":"0b135c55b851b8729bdbc1d9407f9a09b23d241e740d8090f7c9ecf5287aa8a60b7f1f","size":42858,"data":"","first_seen":"2026-08-13T10:51:38.85228Z","last_seen":"2026-08-20T21:40:04.838139Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-9076-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfa61bf1bf435802d0d20593dd275c88","sha1":"b481c48c4841acc3e790314a81b3b3b54a84d42d","sha256":"0c09cbd5f8f9084d8192cb74b9316eeca6bad914bb779417e67c43f0f6a6a15d","sha512":"1cebedd68af6a8019522f78fbb9bb40b95860dc6dfc64ea3ee8809515ead790fc1319b403f478cd311f9feaddebabaf2b20dbbfee73677b10ba3ebc2c34d96d6","ssdeep":"768:Xw2QkcbUUsLckTfdBY+vnB93AFv+Cv5tfgd2D+BUFpceIK7lXS8suDBz4QuAAPPD:g2FcZKckrXtvB9GKiFuE+","tlshash":"0743c589b591f0b157d35196802f450bf23a1938b04ea090f6a8d8f66cf9d9f903bf79","size":57901,"data":"","first_seen":"2026-08-06T14:46:56.368862Z","last_seen":"2026-08-20T21:40:04.778895Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/vxe-table-BiK6aQR5.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7445d0320f538717509390b83a5d0ef7","sha1":"686904261cca9555c94b4febf4c5eae02683e3d3","sha256":"ccdd60da2f51859dc470777f532c940d364f806df77b70ee2666b2621ea77488","sha512":"8af4a096ebadbfa7dd022c5dd55b8cc1335907357c372e13b637c61ff0c5e1af2922b564af2d9ecb0c5c8580e5c7080efd85a84f7b8509146ee9f24a9d825425","ssdeep":"12288:9TMhnLWcZ0dhdtGmdeKmJPR0K3OwC8wKukXdDxMXn4s7R37fU2l:tMhnV0dhdtGmdeKmJPR0K+wC8zXdDxMb","tlshash":"4ca46ba73251b07283fd04e8c0aa0905b6250f9ae549d0f1f67ecd9e385a852e97ff1d","size":483990,"data":"","first_seen":"2026-08-20T15:38:15.876052Z","last_seen":"2026-08-20T15:45:01.686642Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/ThePhone-BUUZrNaV.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4839440a702b11af665d9fd8cf59f52f","sha1":"1de0f1467a8b1fa86ee7d8d95bb5b8565fa22274","sha256":"e6e6e809c0e9de67292305936c7e8e7b6259d47d4e09c225315c9c2bf37e2e26","sha512":"40261a5558dd020814f8f43a216ed8226816d023b678e0adfe79e85b8daaae5f1783568c02ab2f24af4b6f0f70936a2b6378f09813101de0dd19b091bed5bf82","ssdeep":"","tlshash":"a841830eba98c7b6fafb82d4b02604146b0c6f9ed538008a98ed1f222709df5466d718","size":2388,"data":"","first_seen":"2026-08-20T15:38:15.899077Z","last_seen":"2026-08-20T15:45:01.656831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7812d994024348872d0272fda770adc","sha1":"56b73da3f78db507ed9420bc80deec38e6af8580","sha256":"779aae95cf20e6bc6e834381ba79df0d92976f7623a6d589eaa0d815d42de448","sha512":"95db91b74b993128dcc1950ec06a11e3c8ad1bf5f023da2fb13f4850c5fff62c1749057687160133c922b71f59e6e39c3f3a1d9a2fd097df60eb257b993018d8","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsyb0TvYJI+rT36kdvWo0K5u:vtAZsyqH1","tlshash":"eae23c3b449ca51f3f75a681bc45b24eb7ab9500bd8c4778f4869c0e93acd1026fbb49","size":33544,"data":"","first_seen":"2026-08-04T14:24:23.13476Z","last_seen":"2026-08-20T21:40:04.832202Z","times_seen":372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-5433-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"171b58b17e374e6206422448bded11d6","sha1":"2c33294f16e7db5be59d464017a53107fac81570","sha256":"9e665b0ebb461993e2dfee193d44dbb13b07496738b56455aa348a62b86aad88","sha512":"b37cffc400292711e83718dd3068070b69cdbe49f9dc613fd2d0fa4bf8fe89c1e95aecf241329783b0cd0d8dffc72233a79b289a035ff5be9b071d8a9a9ac463","ssdeep":"12288:4a0cVzek/5xbez05mYf12MpQtJxbeyarp35Z:4LEzek/5xbez05xfpQtJxbCrp35Z","tlshash":"c0942aea71a5b03247e70aa550bb0105b7355d54340ac1a4f22cddef3daa44ab2b7f3e","size":446116,"data":"","first_seen":"2026-04-29T13:00:36.23222Z","last_seen":"2026-08-20T21:06:07.723457Z","times_seen":3101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-T6N6X7Q","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19b9d0e0f3aec49cc77f57a689793749","sha1":"e8371de8d95c66cc2ccf0b2a407ced489a648b36","sha256":"f869fb5a7d0983fe79aed70ebfe21e8b3a45b1cf1d4c8b89a93c335abef88d65","sha512":"a24c308dffbf7887bd633c0274ef6017fa0ce1a0ab20e2568d2bcba2ebe73fc77aec8cb6ec735f0a89e6e830566994f3d0b5a5d748d8cb9696f806193c6eab29","ssdeep":"6144:BwAjeTs1y910SRPML04d8Z4yfpBjcR8eaEBy3zdzETGS4bp1rl:Bw7CStMA4ryET2l1Z","tlshash":"bbb41acdb3d674669397b478903f018fa57a38e2b44cd895f189c8e42e34a9a4123f7d","size":521043,"data":"","first_seen":"2026-08-20T15:45:01.615154Z","last_seen":"2026-08-20T15:45:01.615154Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"041671e66d544d16a2f3253db7eb292d","sha1":"714040eb70cdaecb3905beccbcc49f353103052a","sha256":"d749972125a123cb590ad995e864a2ce09b5aab8cec11b222ab671920c6e33a5","sha512":"54ee0a026a6d51e1a18a4f3fb7a0a2d63a892b3041c8fe26edf2fc858bc4850be6b52d9e7e173eae6e25f46d3568c8f39c076e994f12654ea18723a161c2427d","ssdeep":"","tlshash":"efe0a31d2c1eb46157f41999f337d51534d5120225412655cbc7d4643d70cc568c5a4c","size":423,"data":"","first_seen":"2024-12-11T15:34:05.74451Z","last_seen":"2026-08-20T15:45:01.704382Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/adb98dc7-1f72-49d3-98d9-a36cc8491952","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"","is_inline":false,"md5":"91679ef8799ffd7e0676168ac5c000cb","sha1":"e495f93dfd0332f66d3f1f4ad49c1cd2199d6e76","sha256":"f401f7d982637cb02af2d075dff972aabee9ba43c0714091b53224532ce1d933","sha512":"b6d704e4524cd168ed07f5ce710ab6cfa20b70c963b506bd9445732c375c4031c0571d958c0e066f08cf3f53e80f869b0de3391cc865c1d88375d4f695cc93bf","ssdeep":"384:6ae+Y9RyGizBcHjmKbVWBZEkZkySoV+/T4ull6XLN:6aehGzBEWVShuB","tlshash":"34b2b6a129e350281be02c94e65b4ba66a7151312c4505dcf37dcca93cb4ecbe17bb7e","size":24198,"data":"","first_seen":"2026-06-11T20:22:45.010525Z","last_seen":"2026-08-20T15:45:01.705086Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Failed to load Baidu SDK:Failed to load Baidu SDK","filename":"https://portal.fxcngold.com/assets/index-CiwMgkbR.js","line_number":9,"column_number":11664}]},"http":[{"url":{"schema":"https","addr":"tmgm.zendesk.com/frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088","fqdn":"tmgm.zendesk.com","domain":"zendesk.com","tld":"com"},"ip":{"addr":"216.198.53.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.930Z","timestamp":1787240650930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgm.zendesk.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:36:49 GMT","end":"Tue, 20 Oct 2026 18:36:48 GMT"},"fingerprint":{"sha1":"30:47:A7:3A:48:47:FA:F8:7F:48:CC:D6:12:B5:BF:74:44:99:49:61","sha256":"BF:5A:EE:C8:17:1F:19:36:18:CC:16:52:96:76:FB:F4:62:65:9F:76:DF:C4:3A:38:07:0F:76:4E:C8:A2:CB:94"}}},"request":{"raw":"OPTIONS /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1\r\nHost: tmgm.zendesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://portal.fxcngold.com/\r\nOrigin: https://portal.fxcngold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Thu, 20 Aug 2026 15:44:14 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncache-control: max-age=600\r\nvary: Origin, Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nzendesk-service: frontend-event-ingestor\r\nx-zendesk-zorg: yes\r\nx-request-id: a2e284a918cc32fa-NRT\r\nvia: zorg\r\nx-envoy-decorator-operation: /frontendevents/pv\r\nset-cookie: __cf_bm=HE63qjMZJ2ltrtdpGy.m2IXnwZ_3wBKZ.urSEejP1rw-1787240654.2579281-1.0.1.1-9HxJqvVk8gdNm5Co1dvK0mshkxkRd8dzrZ2.8p4YIrncvsvJ0T7Gg5ciAfnlQAIboV5.gLJ7cGz_zvymVqjLiA1qhQsTb4yDNkqz6lbcWITNdFYA.noae9xw7.Ix8Kw5; HttpOnly; SameSite=None; Secure; Path=/; Domain=tmgm.zendesk.com; Expires=Thu, 20 Aug 2026 16:14:14 GMT\n_cfuvid=rNSpOfij0wCwaXrftoG.rk9TaLS4U_6ax87Gq6hSQ3s-1787240654.2579281-1.0.1.1-YObBRk.5AakFojKTXdAONR8Fv3_4xH1r4fqKeTGw8mU; HttpOnly; SameSite=None; Secure; Path=/; Domain=tmgm.zendesk.com\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=me3dk1t0teseNNSDoAbkmtXGQU2UUjfbE0GQzAnHm9S1dT9Is8bKV9HR3bL99lm%2Bg39JwJjJQ1M5aV2BqKIw0J5jrMpkTJBFpChhN9G88r5sVXYMvQPZRTmESUeNmW7RkEY%3D\"}]}\r\ncf-ray: a2e284a918cc32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"HE63qjMZJ2ltrtdpGy.m2IXnwZ_3wBKZ.urSEejP1rw-1787240654.2579281-1.0.1.1-9HxJqvVk8gdNm5Co1dvK0mshkxkRd8dzrZ2.8p4YIrncvsvJ0T7Gg5ciAfnlQAIboV5.gLJ7cGz_zvymVqjLiA1qhQsTb4yDNkqz6lbcWITNdFYA.noae9xw7.Ix8Kw5","quoted":false,"path":"/","domain":"tmgm.zendesk.com","expires":"2026-08-20T16:14:14Z","raw_expires":"Thu, 20 Aug 2026 16:14:14 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=HE63qjMZJ2ltrtdpGy.m2IXnwZ_3wBKZ.urSEejP1rw-1787240654.2579281-1.0.1.1-9HxJqvVk8gdNm5Co1dvK0mshkxkRd8dzrZ2.8p4YIrncvsvJ0T7Gg5ciAfnlQAIboV5.gLJ7cGz_zvymVqjLiA1qhQsTb4yDNkqz6lbcWITNdFYA.noae9xw7.Ix8Kw5; HttpOnly; SameSite=None; Secure; Path=/; Domain=tmgm.zendesk.com; Expires=Thu, 20 Aug 2026 16:14:14 GMT"},{"name":"_cfuvid","value":"rNSpOfij0wCwaXrftoG.rk9TaLS4U_6ax87Gq6hSQ3s-1787240654.2579281-1.0.1.1-YObBRk.5AakFojKTXdAONR8Fv3_4xH1r4fqKeTGw8mU","quoted":false,"path":"/","domain":"tmgm.zendesk.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=rNSpOfij0wCwaXrftoG.rk9TaLS4U_6ax87Gq6hSQ3s-1787240654.2579281-1.0.1.1-YObBRk.5AakFojKTXdAONR8Fv3_4xH1r4fqKeTGw8mU; HttpOnly; SameSite=None; Secure; Path=/; Domain=tmgm.zendesk.com"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":1340,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T21:30:43.488711Z","times_seen":17999379,"resource_available":true,"data":null}},"time_used":3615,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":285,"receive":0,"ssl":3325},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/index-CiwMgkbR.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:04.337Z","timestamp":1787240644337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/index-CiwMgkbR.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-52d2e9\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5427945,"size_decoded":3486470,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22021)","md5":"efead00f0b3c591f3d8071591cdbf6c1","sha1":"99acf8507601c610d86fd5a13d5b09f71417a27a","sha256":"f929df8202f5193790ec305d59e6362c5342dbc33821a71a58dd35ffb43f1b7d","sha512":"6b2270da41dd207e76ce730f150a8ed0d4f350c89b9a057611c56345125890a8b981283fdda92f68625b1bcd90b68c01d26acbc8aafe8bb842982bc199d8a945","ssdeep":"24576:Tv5FlmD+mLSD4K/045WBx5jfigxlXkiSwnzLybYf:Tv5FlmD+mLSD4K/045WBjjKgxxkiSwnf","tlshash":"4d259fc9728570b9179317b9b47b1104b23c2860b9498094f5acc9be3af288d9677ffd","first_seen":"2026-08-20T15:38:15.892928Z","last_seen":"2026-08-20T15:45:01.603622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1190,"receive":1108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/startRecording-DJ1pXEeY.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.159Z","timestamp":1787240647159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/startRecording-DJ1pXEeY.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-671d\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26397,"size_decoded":10103,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23916)","md5":"c43ff441372bd07d1f1f326f0fbc8ab3","sha1":"43a19b0177f00cd5af2346da5fdf680cf61ef240","sha256":"116f5146b27f695306c86e6f7089a49d4727554eaa4dca93d7393f3123b6da24","sha512":"00f442def9abd3de132d8f82cfb63810fda177860763a2abbfa89bdd713c077ca0acc4ec7afb6f7b7bd49359256c7d61110770507689d0a9232cf16ebbb2a5a7","ssdeep":"768:eJDLRenTB2JdbgPO6vK55D3tQDY+3fm8wCfjBzNH+ZqbEMNX1fExZMNTbOOOwDki:Yq2gPsvd2mdCfjUqb6+KK3ye1","tlshash":"94c209ec72c939b367d64ffa50bb00817b701440740e4990e5adce9b3e7606662a7fac","first_seen":"2026-08-20T15:38:15.865031Z","last_seen":"2026-08-20T15:45:01.606195Z","times_seen":2,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/18208205874/?random=2032217972\u0026cv=11\u0026fst=1787240647648\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68i1v9254626790z8831838565za20gzb831838565zd831838565xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938469~118897920~118897930~119367802~119367810~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans\u0026rcb=15\u0026label=0ovYCKjQ1bkcELLYrOpD\u0026frm=0\u0026tiba=TMGM%20PORTAL\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1460800492.1787240647\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=50746332.1787240648\u0026_tu=CBA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkUKEQjwy5rUBhDmuIv55LHm_Z0BEjAAhgDllJ57sDQMGHqn4MK7POMNOgcwEkKJGgIvXn_GjPY38uCaiSMlfcKSQZpaaqfw_wcB\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCJPasQII29yxAgiH27ECCNPFsQII68yxAgjtzrECCNXPsQII9NqxAgiS67ECCMnjsQIIl9SxAgjJ27ECCM3msQIIseGxAgiz4bECCKbdsQIIgNuxAg\u0026cerd=ChTr370tpqe-LYKwvi2Evr4ttdG-LQ\u0026eitems=ChEI8Mua1AYQopq_opD_ub62ARIdAGEbsVssfG2ETAkah97p0p2etaRT_VbPVBG9dxw\u0026fsk=ChEI8Mua1AYQ-dbH9NCshb-7ARIsAElqN-BCpbJxRaMj_konG5aDtonwRcj62YmAMzd6FzBc2GU6cp7b3lDyQvgaAqRO\u0026ipr=y\u0026pscrd=IhMIpK3fn8avlgMVPmWRBR25ZiFUOhxodHRwczovL3BvcnRhbC5meGNuZ29sZC5jb20vQlhDaEVJOE11YTFBWVE1NGVTcE9heGo4UzlBUkl0QUZMVU5hd0Z2Q2pHQ1Q4SEhfcjl5T3p2RGFuSlhYQlRweGZhV1dmaC1YM2EzYVAxcWg0bjB6bkV6XzVWegwICWIICAAQABgAIAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:08.333Z","timestamp":1787240648333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:45:29 GMT","end":"Wed, 28 Oct 2026 20:45:28 GMT"},"fingerprint":{"sha1":"60:44:6A:CC:E7:29:64:9F:66:F2:F1:2C:BF:34:56:29:66:54:56:1D","sha256":"90:93:EF:A8:42:D4:1C:9D:B7:7F:AB:30:B8:01:74:40:34:43:98:82:58:23:6B:66:43:3A:57:DE:A4:A5:21:B9"}}},"request":{"raw":"GET /pagead/1p-conversion/18208205874/?random=2032217972\u0026cv=11\u0026fst=1787240647648\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68i1v9254626790z8831838565za20gzb831838565zd831838565xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938469~118897920~118897930~119367802~119367810~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans\u0026rcb=15\u0026label=0ovYCKjQ1bkcELLYrOpD\u0026frm=0\u0026tiba=TMGM%20PORTAL\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1460800492.1787240647\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=50746332.1787240648\u0026_tu=CBA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkUKEQjwy5rUBhDmuIv55LHm_Z0BEjAAhgDllJ57sDQMGHqn4MK7POMNOgcwEkKJGgIvXn_GjPY38uCaiSMlfcKSQZpaaqfw_wcB\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCJPasQII29yxAgiH27ECCNPFsQII68yxAgjtzrECCNXPsQII9NqxAgiS67ECCMnjsQIIl9SxAgjJ27ECCM3msQIIseGxAgiz4bECCKbdsQIIgNuxAg\u0026cerd=ChTr370tpqe-LYKwvi2Evr4ttdG-LQ\u0026eitems=ChEI8Mua1AYQopq_opD_ub62ARIdAGEbsVssfG2ETAkah97p0p2etaRT_VbPVBG9dxw\u0026fsk=ChEI8Mua1AYQ-dbH9NCshb-7ARIsAElqN-BCpbJxRaMj_konG5aDtonwRcj62YmAMzd6FzBc2GU6cp7b3lDyQvgaAqRO\u0026ipr=y\u0026pscrd=IhMIpK3fn8avlgMVPmWRBR25ZiFUOhxodHRwczovL3BvcnRhbC5meGNuZ29sZC5jb20vQlhDaEVJOE11YTFBWVE1NGVTcE9heGo4UzlBUkl0QUZMVU5hd0Z2Q2pHQ1Q4SEhfcjl5T3p2RGFuSlhYQlRweGZhV1dmaC1YM2EzYVAxcWg0bjB6bkV6XzVWegwICWIICAAQABgAIAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://portal.fxcngold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":613,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T21:30:43.488711Z","times_seen":17999379,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":10,"connect":8,"send":0,"wait":27,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/api/getJurisdictionAssignRuleInfo?register_link=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:09.189Z","timestamp":1787240649189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /api/getJurisdictionAssignRuleInfo?register_link=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/prs.CRM-Back-End.v3+json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nIf-Modified-Since: 0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:09 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 8000\r\nx-ratelimit-remaining: 7994\r\nx-ratelimit-reset: 1787240707\r\netag: W/\"fa4b8a9e9128d9672d573dc2bab040f65122cfc7\"\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122,"size_decoded":707,"mime_type":"application/json","magic":"JSON text data","md5":"5d1397f779ac76af084f0d60c3cf6596","sha1":"fa4b8a9e9128d9672d573dc2bab040f65122cfc7","sha256":"60f91ba9fb57e1731e39c701a55c7f579e5063b0b9c52bcee1655ed72d702c5c","sha512":"f6a0a8f6833414b8d3120221750aa621c876eec95f1e7fdd7c866b064cf431a58028c3e61822d309e95594abc6ec6f282affa95026ce290a3598bfd7bd5357d3","ssdeep":"","tlshash":"51b09224600066ee56ee25aa9d46de0b027e0298461cc6918b6a4aed8baa45e49ce353","first_seen":"2026-06-15T12:29:57.570597Z","last_seen":"2026-08-20T15:45:01.608411Z","times_seen":4,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-20T15:44:02.730Z","timestamp":1787240642730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /register?node=MzY0MTIz\u0026language=zh-Hans HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:03 GMT\r\ncontent-type: text/html\r\nalt-svc: h3=\":443\"; ma=3600\r\nset-cookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea;path=/;HttpOnly;Max-Age=1800\nINGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; Max-Age=3600; Path=/; Secure; HttpOnly\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-d05\"\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"acw_tc","value":"2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea","quoted":false,"path":"/","max_age":1800,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea;path=/;HttpOnly;Max-Age=1800"},{"name":"INGRESSCOOKIE","value":"a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc","quoted":false,"path":"/","max_age":3600,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; Max-Age=3600; Path=/; Secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3333,"size_decoded":2208,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1752)","md5":"7a0788b8f11cdcf0d5c5a69fa81633d0","sha1":"4de61c04f0bd3ee5c923549e288a1e3966ec18f0","sha256":"1b598be986085baa8125a4d24a84d7f91a9dc6c550b34186114597131245926d","sha512":"6d1b1dae1c8ebee872a0a34d52df92aca3953649b370f4ff207050da65fbad2b549e0b07c68b6a29dc0c03abd8214a4b9c27866977cd4d4bb9fbbbc15719c6b4","ssdeep":"","tlshash":"3c61b5a60002b01d122b25267ae1332d10b3a15bd353d5fdfabe51bddfc4b8b4a3a95d","first_seen":"2026-08-20T15:38:15.828227Z","last_seen":"2026-08-20T15:45:01.609745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1242,"timings":{"blocked":0,"dns":76,"connect":278,"send":0,"wait":295,"receive":0,"ssl":593},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/sprite-B4Ye6yLX.png","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.280Z","timestamp":1787240650280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/sprite-B4Ye6yLX.png HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/assets/ThePhone-B9y2vtda.css\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647; member_locale=zh-Hans\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 43776\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\netag: \"6a7c3832-ab00\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43776,"size_decoded":44245,"mime_type":"image/png","magic":"PNG image data, 600 x 540, 8-bit colormap, non-interlaced","md5":"3c7cad9fb5614c7f9edd87716badb481","sha1":"b93d83a56af4c637ec2637b00dcf1f49eb38bff8","sha256":"2ee5091d9a49eceb413dec56d50be02d00d4036b27e300b46ab75adbb23fc141","sha512":"9f8203457d098766531a48dcafd2d93082d9ad61d620a6893cf83f24096ab26aa75d6b905010e868c5aaf8232aa16e575868d0e8cb7fda3593ca736f36379dee","ssdeep":"768:aJkcAIhrJPcIZmaQOjtZ8eV1Tu533RKpKoPCLMgHLEyv+s:aJVAIDPFsm8eba5alXgYyv+s","tlshash":"1613f1a85efb625b7d01a35357718836563e28c0e1d88637e8a268db6c7001d7dee06b","first_seen":"2026-06-15T12:29:57.576492Z","last_seen":"2026-08-20T15:45:01.612558Z","times_seen":4,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"o.alicdn.com/captcha-frontend/aliyunCaptcha/AliyunCaptcha.js","fqdn":"o.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:09.194Z","timestamp":1787240649194,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /captcha-frontend/aliyunCaptcha/AliyunCaptcha.js HTTP/1.1\r\nHost: o.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T21:30:43.488711Z","times_seen":17999379,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/api/companies/show?type=2\u0026lang=zh-Hans\u0026jurisdiction=VFSC","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.370Z","timestamp":1787240650370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /api/companies/show?type=2\u0026lang=zh-Hans\u0026jurisdiction=VFSC HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/prs.CRM-Back-End.v2+json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nIf-Modified-Since: 0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647; member_locale=zh-Hans\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 8000\r\nx-ratelimit-remaining: 7989\r\nx-ratelimit-reset: 1787240707\r\netag: W/\"4e5cfa5ced13205b610ecd7533fc1636ce273dba\"\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1930,"size_decoded":1525,"mime_type":"application/json","magic":"JSON text data","md5":"8747683c568ca4acb0738ab19f6b46fb","sha1":"4e5cfa5ced13205b610ecd7533fc1636ce273dba","sha256":"813249bc3e5168d0c516d7476f63c867c9fbeea71759632dea36d94f589a15ad","sha512":"686912c54a70c973162299da816c862db871dfc3dc50bf06d1cd669f788322baa92b5f613ffcd5c44e70acebddcee78c2649291fc24b9c2677000913a89c4843","ssdeep":"","tlshash":"d741f0ffae22283996fc03cc8d582e5ecde1063755aac277d0f74d59371241ca9a0a34","first_seen":"2026-08-20T15:38:15.830518Z","last_seen":"2026-08-20T15:45:01.613555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-T6N6X7Q","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.168Z","timestamp":1787240647168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtm.js?id=GTM-T6N6X7Q HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 20 Aug 2026 15:44:07 GMT\r\nexpires: Thu, 20 Aug 2026 15:44:07 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 20 Aug 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 172622\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":521043,"size_decoded":173272,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26120)","md5":"19b9d0e0f3aec49cc77f57a689793749","sha1":"e8371de8d95c66cc2ccf0b2a407ced489a648b36","sha256":"f869fb5a7d0983fe79aed70ebfe21e8b3a45b1cf1d4c8b89a93c335abef88d65","sha512":"a24c308dffbf7887bd633c0274ef6017fa0ce1a0ab20e2568d2bcba2ebe73fc77aec8cb6ec735f0a89e6e830566994f3d0b5a5d748d8cb9696f806193c6eab29","ssdeep":"6144:BwAjeTs1y910SRPML04d8Z4yfpBjcR8eaEBy3zdzETGS4bp1rl:Bw7CStMA4ryET2l1Z","tlshash":"bbb41acdb3d674669397b478903f018fa57a38e2b44cd895f189c8e42e34a9a4123f7d","first_seen":"2026-08-20T15:45:01.615154Z","last_seen":"2026-08-20T15:45:01.615154Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":13,"connect":15,"send":0,"wait":38,"receive":50,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/AuthLayout-ixXRzbZV.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.909Z","timestamp":1787240647909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/AuthLayout-ixXRzbZV.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-e65\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3685,"size_decoded":2220,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3682)","md5":"74ad4a19c30fbb04d5cda137bacdab89","sha1":"809005e900b454dc132d9316918de0fc96b8756a","sha256":"b6aa551bc9c41ec06c2bc7669c6b03cac2d9c0bf41807416f8769499adeb5001","sha512":"792ec626265bf0cb4c0aafbb9277b28ef41499b42035da0b49cf25f53caa660707300f26e33178d9d6735ff443ef226efcba05b478d9111a0084f28412ef940a","ssdeep":"","tlshash":"14719889a84ecbbcdbb7515484245410760e2fa4e2a8c5d3f1fc5c2d3b46db5618e33e","first_seen":"2026-08-20T15:38:15.917643Z","last_seen":"2026-08-20T15:45:01.617515Z","times_seen":2,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/ThePassword.vue_vue_type_script_setup_true_lang-DsG1p99N.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.957Z","timestamp":1787240647957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/ThePassword.vue_vue_type_script_setup_true_lang-DsG1p99N.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-fb1\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4017,"size_decoded":2056,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4016)","md5":"53c41d5baf6a5894c3229ef4b3974c88","sha1":"4ad37a6a019f976a68303376b2e6163553691a1d","sha256":"7385cb0e77b74cfbf2459817a0c2dab4b9be6aa336625cd56601a96dda0a132e","sha512":"3494612e867a46a93711ea1cf727b23278a30468792aedfe5cf90e97638dd99de43245031725dab16de5997df888db9631d3e62648257511268314827cf4de44","ssdeep":"","tlshash":"1e812387e81e8d73515bcdbc501344207205a67b82229984aeb9eb1d366bde2bb0a716","first_seen":"2026-08-20T15:38:15.822048Z","last_seen":"2026-08-20T15:45:01.619027Z","times_seen":2,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/auth-frame-bg-CDBOxUGW.png","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:08.785Z","timestamp":1787240648785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/auth-frame-bg-CDBOxUGW.png HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 38946\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\netag: \"6a7c3832-9822\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38946,"size_decoded":39415,"mime_type":"image/png","magic":"PNG image data, 1494 x 864, 8-bit colormap, non-interlaced","md5":"f2c36a44a3ddfb13986c2f2f1a0df06a","sha1":"c4c4e6b7c6e0cdf5c6cecdb9727fcbc4654fca59","sha256":"feda633e53102272de8ef3cf35445546c32c1672b0fb8e73e6df485aeb9a7297","sha512":"f80aa7961153b7a84ba2e2e29bc921b608432dd0cf0eba20d82d81e3dfffa95e9d12aa80ea032426eff46453e2819893b4973243c6d5855679fc26a12044f75c","ssdeep":"768:nbbEVVnjBAPCjSNcum9kFtnF9ajXo6cdK0I8o:07ntAPCjjVyFtN63f","tlshash":"5c03f1fd53b5b8d2e24529473e97a11f8ffa427a0667d27101e619d40e1037ac2fa8c5","first_seen":"2026-08-20T15:38:15.844177Z","last_seen":"2026-08-20T15:45:01.620308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/zh-BTVhNlFJ.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:09.219Z","timestamp":1787240649219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/zh-BTVhNlFJ.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/assets/index-CiwMgkbR.js\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-39221\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":234017,"size_decoded":78100,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (22052)","md5":"c3fa2798e75b1faafa6e25e5005a2a64","sha1":"7984a851f3986cd4a342b4ed10d73381c741547f","sha256":"45731fb902f1696580d4eba96f61fe29e2f14cc7ae962d86cff37603ed54af6f","sha512":"54023e15cf1081563894d1b31a808e8924f28699cfc7c743edd483f3007a82f42e34b8e1e368b79b7c108012661151c979b0d9bb6fd1991644241fa64ae15d4e","ssdeep":"3072:rc91ygGbP38+a+RPreOuLX3apjHelsVRQ2aM072hDhFvO6nWdEIbwnWZX965grV2:r7gaoErIjNYvRDh06nWdE0w9d/ae","tlshash":"58346c1a8deedece08876255bf4f2304307e2941c8e98c18afe54b5c0698dc77ad7796","first_seen":"2026-08-20T15:38:15.901416Z","last_seen":"2026-08-20T15:45:01.62325Z","times_seen":2,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.ahrefs.com/analytics.js","fqdn":"analytics.ahrefs.com","domain":"ahrefs.com","tld":"com"},"ip":{"addr":"104.18.39.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.448Z","timestamp":1787240647448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analytics.ahrefs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 08:12:36 GMT","end":"Sat, 03 Oct 2026 09:12:08 GMT"},"fingerprint":{"sha1":"84:19:A8:CF:39:BC:A7:8F:39:1B:79:AD:F4:E7:EA:E6:42:26:CB:EF","sha256":"4D:2C:16:B8:0D:0F:8E:F9:F7:1F:1A:EB:5C:92:79:A4:D4:44:A4:45:81:47:22:9B:5B:AE:2D:5D:F7:6A:D4:FC"}}},"request":{"raw":"GET /analytics.js HTTP/1.1\r\nHost: analytics.ahrefs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:07 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2692\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\ncdn-cache-control: max-age=18000\r\naccess-control-allow-origin: *\r\ntraceparent: 00-fce43fee1781494f880bc778df1d9532-b423707d782441a7-03\r\nx-request-id: 959cab91-ef63-4c51-b02d-97c8ca16b5c7\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 12982\r\nlast-modified: Thu, 20 Aug 2026 12:07:45 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a2e2847eaea50883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":3264,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6946)","md5":"661ceae031b0d59dc2f3beeac0ae7cfd","sha1":"3b7e9107ffeb21d0c41bfdeef7118ea9d58be07b","sha256":"b270afc5f9df7bcd9239c22857fb1511bba1398a28b1c3548272d720cb433c62","sha512":"b9630a50fbf1c6db29b47246715f640bdc24ed2d268627305989e615be4999fac0d8cbbef4336c2bae701eef903554954566e8dc23a6d623ddf7cfedffbaa062","ssdeep":"192:04fDU0pA7KQisEplEXQI5AuTYafgbNCz1Rx5NFKtiF:jfDU0pA7KQi3plEXQI5AygpC1RnK8F","tlshash":"c8e11a9c723075790877ada1e5ff3743f233a563a881e0914219dd802dac98f42abddd","first_seen":"2026-01-07T13:13:26.365481Z","last_seen":"2026-08-20T20:40:10.67126Z","times_seen":13851,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":6,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/index-BELjsqk_.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.949Z","timestamp":1787240647949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/index-BELjsqk_.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-5bb3\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23475,"size_decoded":8580,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23474)","md5":"f12aa4fc0dd239317403a55ef2482c31","sha1":"0c5ef7e02961b90d7aaf1f8741866f5cfe9f9953","sha256":"368622da878222786c08311db0ccaaccd502abb72fbb14c0fca8c2ed62a0c41d","sha512":"cecd1882a09be3f648d8aab861ba2af5d1201190a91ae1d7708fc7a4630679914de5e9ea26f6ddad04061b08545f7e5f89b2e3fed399a3f5cea3b1ea6fd81972","ssdeep":"384:giA0328rZFz2BwRDmVcNA+QGVgZJfnlTHs6DHa8FcxvbH6UYOo4kfG87N81U6dfd:gb032yZTNA/vDDHa8FevbH62oDfG8O15","tlshash":"d9b22a4db521a5739bff4ab868229005637d4ebbd015a4d0ebfc0f6b1ebaec19607701","first_seen":"2026-08-20T15:38:15.895549Z","last_seen":"2026-08-20T15:45:01.625677Z","times_seen":2,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/18208205874/?random=2032217972\u0026cv=11\u0026fst=1787240647648\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68i1v9254626790z8831838565za20gzb831838565zd831838565xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938469~118897920~118897930~119367802~119367810~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans\u0026rcb=15\u0026label=0ovYCKjQ1bkcELLYrOpD\u0026frm=0\u0026tiba=TMGM%20PORTAL\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1460800492.1787240647\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=50746332.1787240648\u0026_tu=CBA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkUKEQjwy5rUBhDmuIv55LHm_Z0BEjAAhgDllJ57sDQMGHqn4MK7POMNOgcwEkKJGgIvXn_GjPY38uCaiSMlfcKSQZpaaqfw_wcB\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCJPasQII29yxAgiH27ECCNPFsQII68yxAgjtzrECCNXPsQII9NqxAgiS67ECCMnjsQIIl9SxAgjJ27ECCM3msQIIseGxAgiz4bECCKbdsQIIgNuxAg\u0026cerd=ChTr370tpqe-LYKwvi2Evr4ttdG-LQ\u0026eitems=ChEI8Mua1AYQopq_opD_ub62ARIdAGEbsVssfG2ETAkah97p0p2etaRT_VbPVBG9dxw\u0026fsk=ChEI8Mua1AYQ-dbH9NCshb-7ARIsAElqN-BCpbJxRaMj_konG5aDtonwRcj62YmAMzd6FzBc2GU6cp7b3lDyQvgaAqRO\u0026pscrd=IhMIpK3fn8avlgMVPmWRBR25ZiFUOhxodHRwczovL3BvcnRhbC5meGNuZ29sZC5jb20vQlhDaEVJOE11YTFBWVE1NGVTcE9heGo4UzlBUkl0QUZMVU5hd0Z2Q2pHQ1Q4SEhfcjl5T3p2RGFuSlhYQlRweGZhV1dmaC1YM2EzYVAxcWg0bjB6bkV6XzVWegwICWIICAAQABgAIAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:08.295Z","timestamp":1787240648295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:14 GMT","end":"Wed, 28 Oct 2026 20:42:13 GMT"},"fingerprint":{"sha1":"9E:E4:0B:D8:22:18:95:CA:F3:60:D0:A9:F5:51:6A:A9:AA:64:B5:C2","sha256":"04:A2:FD:09:AF:5F:A4:87:31:AC:C8:12:2A:13:F3:C5:AD:27:8F:5B:96:8F:50:1C:BA:45:10:A3:9D:C8:20:42"}}},"request":{"raw":"GET /pagead/1p-conversion/18208205874/?random=2032217972\u0026cv=11\u0026fst=1787240647648\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68i1v9254626790z8831838565za20gzb831838565zd831838565xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938469~118897920~118897930~119367802~119367810~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans\u0026rcb=15\u0026label=0ovYCKjQ1bkcELLYrOpD\u0026frm=0\u0026tiba=TMGM%20PORTAL\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1460800492.1787240647\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=50746332.1787240648\u0026_tu=CBA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkUKEQjwy5rUBhDmuIv55LHm_Z0BEjAAhgDllJ57sDQMGHqn4MK7POMNOgcwEkKJGgIvXn_GjPY38uCaiSMlfcKSQZpaaqfw_wcB\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCJPasQII29yxAgiH27ECCNPFsQII68yxAgjtzrECCNXPsQII9NqxAgiS67ECCMnjsQIIl9SxAgjJ27ECCM3msQIIseGxAgiz4bECCKbdsQIIgNuxAg\u0026cerd=ChTr370tpqe-LYKwvi2Evr4ttdG-LQ\u0026eitems=ChEI8Mua1AYQopq_opD_ub62ARIdAGEbsVssfG2ETAkah97p0p2etaRT_VbPVBG9dxw\u0026fsk=ChEI8Mua1AYQ-dbH9NCshb-7ARIsAElqN-BCpbJxRaMj_konG5aDtonwRcj62YmAMzd6FzBc2GU6cp7b3lDyQvgaAqRO\u0026pscrd=IhMIpK3fn8avlgMVPmWRBR25ZiFUOhxodHRwczovL3BvcnRhbC5meGNuZ29sZC5jb20vQlhDaEVJOE11YTFBWVE1NGVTcE9heGo4UzlBUkl0QUZMVU5hd0Z2Q2pHQ1Q4SEhfcjl5T3p2RGFuSlhYQlRweGZhV1dmaC1YM2EzYVAxcWg0bjB6bkV6XzVWegwICWIICAAQABgAIAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://portal.fxcngold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/18208205874/?random=2032217972\u0026cv=11\u0026fst=1787240647648\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68i1v9254626790z8831838565za20gzb831838565zd831838565xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938469~118897920~118897930~119367802~119367810~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans\u0026rcb=15\u0026label=0ovYCKjQ1bkcELLYrOpD\u0026frm=0\u0026tiba=TMGM%20PORTAL\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1460800492.1787240647\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=50746332.1787240648\u0026_tu=CBA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkUKEQjwy5rUBhDmuIv55LHm_Z0BEjAAhgDllJ57sDQMGHqn4MK7POMNOgcwEkKJGgIvXn_GjPY38uCaiSMlfcKSQZpaaqfw_wcB\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCJPasQII29yxAgiH27ECCNPFsQII68yxAgjtzrECCNXPsQII9NqxAgiS67ECCMnjsQIIl9SxAgjJ27ECCM3msQIIseGxAgiz4bECCKbdsQIIgNuxAg\u0026cerd=ChTr370tpqe-LYKwvi2Evr4ttdG-LQ\u0026eitems=ChEI8Mua1AYQopq_opD_ub62ARIdAGEbsVssfG2ETAkah97p0p2etaRT_VbPVBG9dxw\u0026fsk=ChEI8Mua1AYQ-dbH9NCshb-7ARIsAElqN-BCpbJxRaMj_konG5aDtonwRcj62YmAMzd6FzBc2GU6cp7b3lDyQvgaAqRO\u0026ipr=y\u0026pscrd=IhMIpK3fn8avlgMVPmWRBR25ZiFUOhxodHRwczovL3BvcnRhbC5meGNuZ29sZC5jb20vQlhDaEVJOE11YTFBWVE1NGVTcE9heGo4UzlBUkl0QUZMVU5hd0Z2Q2pHQ1Q4SEhfcjl5T3p2RGFuSlhYQlRweGZhV1dmaC1YM2EzYVAxcWg0bjB6bkV6XzVWegwICWIICAAQABgAIAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T21:30:43.488711Z","times_seen":17999379,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.294Z","timestamp":1787240650294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:45 GMT","end":"Wed, 28 Oct 2026 20:43:44 GMT"},"fingerprint":{"sha1":"B7:46:09:45:08:65:39:24:A9:15:3D:36:1B:A8:14:83:15:F8:BC:DE","sha256":"CC:52:63:08:35:24:92:7E:29:4C:2A:B7:08:DD:91:33:FE:34:AD:9D:58:2B:79:7B:5E:AD:4D:7C:C9:3D:9E:6C"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://portal.fxcngold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 00:04:00 GMT\r\nexpires: Fri, 20 Aug 2027 00:04:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56410\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":30780,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-08-20T16:35:55.324845Z","times_seen":9654,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmtm-kh.com/","fqdn":"tmtm-kh.com","domain":"tmtm-kh.com","tld":"com"},"ip":{"addr":"3.33.236.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-20T15:44:02.246Z","timestamp":1787240642246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmtm-kh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:52:18 GMT","end":"Mon, 09 Nov 2026 04:52:17 GMT"},"fingerprint":{"sha1":"66:F3:A4:46:5D:B2:2C:B2:F7:D2:C3:7D:BB:6C:74:03:56:95:AE:3C","sha256":"C8:10:27:EF:D9:E2:A4:BA:2D:E3:9D:F1:07:ED:C7:E3:FB:48:26:88:4F:EF:10:E7:59:52:2F:34:42:7F:EA:CA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tmtm-kh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: openresty\r\ndate: Thu, 20 Aug 2026 15:44:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 92\r\nedge: edge-de-1611\r\nlocation: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nx-powered-by: RedirHub\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T21:30:43.488711Z","times_seen":17999379,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":395,"connect":1,"send":0,"wait":23,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"tmtm-kh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/favicon.ico","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:06.949Z","timestamp":1787240646949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:07 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 45126\r\nlast-modified: Wed, 12 Aug 2026 09:08:58 GMT\r\netag: \"6a7c382a-b046\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45126,"size_decoded":45598,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 8 icons, 64x64, 8 bits/pixel, 48x48, 8 bits/pixel","md5":"cb0475df34277d51278b1c35daebcbea","sha1":"a990a41493bd55e0a222b1c6b46771cdfc2b65ea","sha256":"96c7307828407236d5c0468d18d59f2713ef47d884cef4da53a23471d8ad45a2","sha512":"18e142860affcfaad2f5176b2c7d90ec8c7d6813715c6d918b87e1165fc3318ac50b69279a7426ef600ccc6adacb72d2b753b5a7c86d8ecaa11dc17500bf002c","ssdeep":"384:qmQyEDqytsKDTzF3kguvlq5wwKQ+NCTzH/c+qxZPQahLj4VbtM4cDSJ9r2:iyEuyjDWhewwKQ+NCXH/c+qxZr02Lgr","tlshash":"17130a0d16692731dc6a3638cf31883dafac5f48a571eb4ea550b6d8b33318ab720437","first_seen":"2024-12-11T15:34:05.718297Z","last_seen":"2026-08-20T15:45:01.627798Z","times_seen":15,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/ThePhone-B9y2vtda.css","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.959Z","timestamp":1787240647959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/ThePhone-B9y2vtda.css HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-42af\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17071,"size_decoded":2315,"mime_type":"text/css","magic":"ASCII text, with very long lines (17070)","md5":"6b40395f8a7c9a58b205db1df5e95da0","sha1":"aa30c693cbaa8b6a5f0cccb52e0041c467aba618","sha256":"baba227aebbb533f5a3db75f646a8d5da542eb874e48ad5ba908e323e4d370f9","sha512":"fa0c8e834607603351e0cb1f749d6d283dd7782363eb271bb7b9243f6c18254143f5d2ae38aea55419f48827c1cfc55c3d600f96cf9445273cc3cac8c2e888d1","ssdeep":"192:X3Bsw1KoxILee6QWboqMA44RuN6KYPkUrvTMZVFVMEtWgedW0KRYfy8aRq1WGWo9:X3Blje2LQ4RxU0vChd3I","tlshash":"d772ea8178dd11a8bbbbd57128a19be05b773b01d4210f7f182bb9bc7a874f474a3852","first_seen":"2026-08-20T15:38:15.884053Z","last_seen":"2026-08-20T15:45:01.628609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/useDeviceId-FOWv4o85.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.961Z","timestamp":1787240647961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/useDeviceId-FOWv4o85.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 389\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\netag: \"6a7c3832-185\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":389,"size_decoded":868,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (388)","md5":"567bbeda475dbc848cd9dbcda4279925","sha1":"e84f85a83d3e35d79de170be45dd5d2009154dd5","sha256":"f959c284fb275743d74343ad2e224f0556d3799595e876069cfd3bfc15547aa8","sha512":"045d2d0920a57f307ed38dd6f1773f334cee82b719af28ff192cdc43145ddc78354d147b20a130379ed979aa41d175dc49988623d46ddebfe5d14cf026029eb3","ssdeep":"","tlshash":"a7e0613672947177450318b9343e4e4d5326a10c2dd58c917e9697a74936075930afdd","first_seen":"2026-08-20T15:38:15.910565Z","last_seen":"2026-08-20T15:45:01.629909Z","times_seen":2,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ekr.zdassets.com/compose/04eb2d06-328d-4516-a883-95ac22c6c339","fqdn":"ekr.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.457Z","timestamp":1787240650457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /compose/04eb2d06-328d-4516-a883-95ac22c6c339 HTTP/1.1\r\nHost: ekr.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://portal.fxcngold.com/\r\nOrigin: https://portal.fxcngold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-cache-control: max-age=60\r\nvary: Accept,Origin, Accept-Encoding\r\ncache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600\r\netag: W/\"6eee387d2972000130cb11679ab2a9f5\"\r\nx-request-id: a2dfc10b2cecc798-ORD\r\nx-runtime: 0.009924\r\nx-envoy-upstream-service-time: 12\r\nzendesk-service: embed-key-registry\r\nx-cache-status: EXPIRED\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\nx-envoy-decorator-operation: /\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQZu5xfbW2A90R4ELkCZlJarAf72ZF8v%2FNV%2B1Ze8Q48q%2FcMSNvDnQRPracUkMR9iZXR%2BVg%2FrLMAMqNYqksEbQGtvxtvsgsUiuDutyS7PboOX36DDYzlt0mjb1SlritUOcm0%3D\"}]}\r\ncf-ray: a2e284916d3ab4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1969,"size_decoded":2220,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"71c9349b728d3323a7638c9f01781a66","sha1":"d3405e8d277cf9e3eb3cced8781d9ea7e35d9970","sha256":"6eee387d2972000130cb11679ab2a9f50ae34177e049d13fae347126086bf714","sha512":"5d1fa956be388f1ee129e44cf16f149675dbb1fb78bf335bd249ef0f562f2dc6de5c78cd5d2e551d174c81e52adf48e9f55e1068b0a9328b5c42c9006b86ac7d","ssdeep":"","tlshash":"b8412159cd0d30bac552c365d4597e031b7d8ebb43983068f8cc680c90eb1df1696b6b","first_seen":"2026-08-20T15:38:15.861342Z","last_seen":"2026-08-20T15:45:01.63128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":5,"connect":2,"send":0,"wait":254,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/lodash-es-BeP-6yLJ.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:04.339Z","timestamp":1787240644339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/lodash-es-BeP-6yLJ.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-8b09\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35593,"size_decoded":13653,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35398)","md5":"04f7b70be73ae2d0cbc95bff3b90d061","sha1":"12b2bcb6ebdc294f91458856901a10b32d3a1a6a","sha256":"acd64840d496365702039bef60098847d89ba7065c443d6c44f62972a001d5be","sha512":"125fcddbdb8d661d8e86d78bdeac50faaaa04ebe3dc3b453a167b521bd902afe331e8008cc2b76900f81a985e9f709bbf8cbca2241299d556f518272ac1301fa","ssdeep":"768:jsnvKqduZ9Lk5EDSd+Ki2ugGoDli2NGoesNrPB4DouJU:WpduZ9Lsrdw2ugGo5itarPu0uJU","tlshash":"a6f252c875c3f45543a66865407f088bf23c6e75a88ca180e19af0ed7d78a1ec677e39","first_seen":"2026-08-20T15:38:15.847225Z","last_seen":"2026-08-20T15:45:01.633033Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1189,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/index-BCgcv7Lt.css","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:04.344Z","timestamp":1787240644344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/index-BCgcv7Lt.css HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-9a3e2\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":631778,"size_decoded":98521,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f5221b74db88d816746a31b51ad9cc40","sha1":"cef2da437ee259b7c6fbf52a841a356252ffebbe","sha256":"e4fc2ebfca01e84fe79d728f39361e61d4d0fc9f721634b669be43b4557d42bd","sha512":"0728ec08ba6230cf3990401aeed07525672d25c7f3793cd6c0992bd4fd43d7b865ba473eb8a7e376498cd952de99dfe7d25f08682fd7cb63867a91f637714b3a","ssdeep":"6144:1QfOXNo8aYXZDGsk7wvaaKM/PTAbXmu4ib1NIEJ0HInPtyc3pLj7xQVRn036kJeO:Qdxf1oOIyHT","tlshash":"f8d4d715e733713b3917d57cb5c4ea99ab28db81c9131bf9f74065088ac7ae102a2d2f","first_seen":"2026-08-20T15:38:15.86365Z","last_seen":"2026-08-20T15:45:01.634582Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1461,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/validation-CyJc5o35.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.953Z","timestamp":1787240647953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/validation-CyJc5o35.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-e7a\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3706,"size_decoded":1941,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3700)","md5":"537c6e522b7717ebdb269a678d837880","sha1":"9ee6f762c0f05234d154046791cdca33e0c5fc8a","sha256":"0372a504292c8447732115671eada50397345374d537d20f2252ae2e74296929","sha512":"0ceb79ab304ebdef71e18f1758aec7a8ad70cb6cb5388445c797fa34a3e4b63de8816bce06cafc38212695bf164e657d47a2db60e03d77a8db0eddf284b28e8f","ssdeep":"","tlshash":"db71334ca6dee1b308bb29e4886900c5b334b95aa5bf8c31c155ae877f260edc7574a4","first_seen":"2026-08-20T15:38:15.882833Z","last_seen":"2026-08-20T15:45:01.63601Z","times_seen":2,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/optionalLabel-DtJ0mii8.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.964Z","timestamp":1787240647964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/optionalLabel-DtJ0mii8.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 244\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\netag: \"6a7c3832-f4\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244,"size_decoded":722,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text","md5":"24b27cc45efaac8da10ed57398aa9f56","sha1":"4e610bb0fbbc0923ac5fb6639f4d6f85878838a2","sha256":"3916a84de8e2782f757e961ffc7f638fd55f9966e0a5080968a94ce39ea979be","sha512":"80b5d0c3a63f42802080d4d7ae0d99d030b14055580844ebe4e4b92a153acb098c7e6071d2ea4392725bdf278a011c72ae0c34c682939976780a67c45a2e3c09","ssdeep":"","tlshash":"e9d0a7467141f3798fc909aa702fb295e77aa40076c2c550517e12d2d5316574665d05","first_seen":"2026-08-20T15:38:15.859567Z","last_seen":"2026-08-20T15:45:01.637484Z","times_seen":2,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/api/getLoginSceneRequiredInfo","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:08.804Z","timestamp":1787240648804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /api/getLoginSceneRequiredInfo HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/prs.CRM-Back-End.v2+json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nIf-Modified-Since: 0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 8000\r\nx-ratelimit-remaining: 7997\r\nx-ratelimit-reset: 1787240707\r\netag: W/\"dac36f207ab33e876ac4459e839a985608414691\"\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50,"size_decoded":658,"mime_type":"application/json","magic":"JSON text data","md5":"8ddb2c6cfdd488693744f03cd9aaa95c","sha1":"dac36f207ab33e876ac4459e839a985608414691","sha256":"c2092834f46c02e468be6fd1a445a61b607cf0156201489168c417affeb4d414","sha512":"8014c21097156fa6bd73f389ce2bf105282aa1e7c31278daae1a7f2bea8f59efce25a671a724e908c7556711f02cc2406bdf72481945bbe0d3c44bf799b02ca6","ssdeep":"","tlshash":"fc90020c9055cd586435a1ad614c6755135706849104bb4391952146a5514c80040440","first_seen":"2025-04-16T21:47:50.41709Z","last_seen":"2026-08-20T15:45:01.639427Z","times_seen":8,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/spectra/spectra.json?version=3.8.7.1_1786525691359","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:06.844Z","timestamp":1787240646844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /spectra/spectra.json?version=3.8.7.1_1786525691359 HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:06 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 12 Aug 2026 09:12:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c38e9-951\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2385,"size_decoded":1638,"mime_type":"application/json","magic":"JSON text data","md5":"ccf79283a717ce57ee2ce4f76cd6dd43","sha1":"fdf3d839ceb6dc8eae50de3485a03be2dc8fd21b","sha256":"5b7e8d143799869a242c4adc91ddee30416be6b5c626a3fd6fa184a0cb5940a7","sha512":"b18474174808bb89b8a7f1f61756d03f485f4f81acdd7e223979086a75898a8376b5a2a5a6b80f0ab2fcde9b1f6129881a5f7521a6b414bc06cc5e31feaccf79","ssdeep":"","tlshash":"7d41ecd7cb108c33075394585877a217642b203b9eaea959b91ecc4c5f9b13f62f227e","first_seen":"2026-08-20T15:38:15.841341Z","last_seen":"2026-08-20T15:45:01.640405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgm-prod-resources.s3.ap-east-1.amazonaws.com/settings/logo/fgBhvMOX8YbZ8cMdFhHic75CzqqxEPeVRFIbHjjp.ico_1628300772","fqdn":"tmgm-prod-resources.s3.ap-east-1.amazonaws.com","domain":"tmgm-prod-resources.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"3.5.214.245","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:08.729Z","timestamp":1787240648729,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /settings/logo/fgBhvMOX8YbZ8cMdFhHic75CzqqxEPeVRFIbHjjp.ico_1628300772 HTTP/1.1\r\nHost: tmgm-prod-resources.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: YrNvAJIRemgcsawV3DlwaQ6HE0jrWL/Dby/s6bTAcrAe3WbSgmZ1AiTZmsUjXhYVihfjrWUKeXoALyR70TwE4UJgGU4ZmaN6\r\nx-amz-request-id: 24010J7RW4XCE21X\r\nDate: Thu, 20 Aug 2026 15:44:10 GMT\r\nLast-Modified: Wed, 04 Dec 2024 12:53:57 GMT\r\nETag: \"cb0475df34277d51278b1c35daebcbea\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-last-modified: 1628300772000\r\nx-amz-version-id: null\r\nAccept-Ranges: bytes\r\nContent-Type: image/x-icon\r\nContent-Length: 45126\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":45126,"size_decoded":45610,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 8 icons, 64x64, 8 bits/pixel, 48x48, 8 bits/pixel","md5":"cb0475df34277d51278b1c35daebcbea","sha1":"a990a41493bd55e0a222b1c6b46771cdfc2b65ea","sha256":"96c7307828407236d5c0468d18d59f2713ef47d884cef4da53a23471d8ad45a2","sha512":"18e142860affcfaad2f5176b2c7d90ec8c7d6813715c6d918b87e1165fc3318ac50b69279a7426ef600ccc6adacb72d2b753b5a7c86d8ecaa11dc17500bf002c","ssdeep":"384:qmQyEDqytsKDTzF3kguvlq5wwKQ+NCTzH/c+qxZPQahLj4VbtM4cDSJ9r2:iyEuyjDWhewwKQ+NCXH/c+qxZr02Lgr","tlshash":"17130a0d16692731dc6a3638cf31883dafac5f48a571eb4ea550b6d8b33318ab720437","first_seen":"2024-12-11T15:34:05.718297Z","last_seen":"2026-08-20T15:45:01.627798Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1536,"timings":{"blocked":0,"dns":6,"connect":251,"send":0,"wait":269,"receive":503,"ssl":507},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/api/captchas/captcha?action=2","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:08.809Z","timestamp":1787240648809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /api/captchas/captcha?action=2 HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/prs.CRM-Back-End.v2+json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nIf-Modified-Since: 0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 201 \r\ndate: Thu, 20 Aug 2026 15:44:09 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 8000\r\nx-ratelimit-remaining: 7995\r\nx-ratelimit-reset: 1787240707\r\netag: \"39ed5d480db8aec5d7d8ab71b6c078db79c7226c\"\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4527,"size_decoded":5072,"mime_type":"application/json","magic":"JSON text data","md5":"8c24cab2645c07c34c2d532b9bcd987c","sha1":"39ed5d480db8aec5d7d8ab71b6c078db79c7226c","sha256":"849718e5891b6740fe0d90f7bd75484e3cd6ba629472f5ff43e169192caa34dd","sha512":"ee3c734c9220d034819e205a7b83c85c4e5aafe5d2801ab1b6ce10b001f84e4fe2a9b169c1137d20e5382f58b24ea9bddfa575bb3f8502d22e497a295bf789a1","ssdeep":"96:Arp0PQQOpFUFX5Z633JqL09rcdZWF/zh7UqgSQzY:2jQOpFUxj6nsLQEoZeTU","tlshash":"ec915c3553e2c288af0909d7c1737ed46dab2a6ac26842eda91135d290dea73074f70e","first_seen":"2026-08-20T15:45:01.641778Z","last_seen":"2026-08-20T15:45:01.641778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.291Z","timestamp":1787240650291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:45 GMT","end":"Wed, 28 Oct 2026 20:43:44 GMT"},"fingerprint":{"sha1":"B7:46:09:45:08:65:39:24:A9:15:3D:36:1B:A8:14:83:15:F8:BC:DE","sha256":"CC:52:63:08:35:24:92:7E:29:4C:2A:B7:08:DD:91:33:FE:34:AD:9D:58:2B:79:7B:5E:AD:4D:7C:C9:3D:9E:6C"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://portal.fxcngold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 00:04:00 GMT\r\nexpires: Fri, 20 Aug 2027 00:04:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56410\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":30780,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-08-20T16:35:55.324845Z","times_seen":9654,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.746Z","timestamp":1787240650746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-main-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: dPlNxsXADZ+ZG3ZInsajaeuL5y98FrMhIuP1xG1Xxr2/zufvjXuKpQSQJrz49rYZ8odlpg1dGiY=\r\nx-amz-request-id: HZR3DQEEG5HBA5V2\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:29 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:28 GMT\r\nx-amz-version-id: vks_hKLmpC3Z3GqSrd8GGHJvyKJDK9.B\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 511356\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfNotkHMpLW2aUCSXXkAva%2FSJ672BzZhRuo%2FaaiJ2Dhrzv0uyMdaxvB4B5MoN%2FFs7p1sz5EFJNyhTh4lih%2FBKmf%2Fi6X7K%2Bp5WA1FpjeB63Gspsd3uxYDkH7Fv%2FMo9Ly5gGg8T5M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"858c4430a33d22566db4740acb2cbe52\"\r\ncontent-encoding: br\r\ncf-ray: a2e284932ce4a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":606269,"size_decoded":185742,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65306)","md5":"858c4430a33d22566db4740acb2cbe52","sha1":"23598dc09a828a03fdca01d44118686369b1269d","sha256":"dd73931be2042d04ca061d39f8549f5e299ce51b8b9429721a5255dc422df30e","sha512":"7fc37591e5ac3cbc07e63a3a01223cb6a5e587e06bc8452dac167e8e142a577571f29165044dd280e6382846027da6fa0e2a579ef11b5faebeccd81ed247985e","ssdeep":"12288:M0rLSdnjbqteAPD0GGX39+ADhJAftBlCMZJGqWs:M0rLSdnjbqteAPD0l++JA1OwGqWs","tlshash":"2ad47cd970d2b0661bf345e7506f2006b33939197c0d8490f698ec9a6bb848db1b7fad","first_seen":"2026-08-13T10:51:38.74408Z","last_seen":"2026-08-20T21:40:04.777161Z","times_seen":160,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.889Z","timestamp":1787240650889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: OME3VlTVFKcUL0RwoUsb8Jqxo6/CNwrdSaiMitlsS/rDsZukVhMFBUchoTyxqlfu+e0yv7W4IX8=\r\nx-amz-request-id: JXJYKW77FD66NQXA\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:31 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:30 GMT\r\nx-amz-version-id: MdCZ9Dv7.RWsF6I8Jda21BqMbhI7Etk7\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 628657\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fg0CHn8VHPfbv8%2FI04Z6F4%2F9CaDQ%2B6xp3V46zSoUI7Z3c0K3ueERTDpQ%2B8BClw59aOJgyIMAHPtWoyFO1BC134QMCQVnrb1BznU7UyqqjM3uvqNK7gYnyxFh9cO%2BUrc2Pd0N3hM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"c7812d994024348872d0272fda770adc\"\r\ncontent-encoding: br\r\ncf-ray: a2e284940db4a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33544,"size_decoded":6685,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33528), with no line terminators","md5":"c7812d994024348872d0272fda770adc","sha1":"56b73da3f78db507ed9420bc80deec38e6af8580","sha256":"779aae95cf20e6bc6e834381ba79df0d92976f7623a6d589eaa0d815d42de448","sha512":"95db91b74b993128dcc1950ec06a11e3c8ad1bf5f023da2fb13f4850c5fff62c1749057687160133c922b71f59e6e39c3f3a1d9a2fd097df60eb257b993018d8","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsyb0TvYJI+rT36kdvWo0K5u:vtAZsyqH1","tlshash":"eae23c3b449ca51f3f75a681bc45b24eb7ab9500bd8c4778f4869c0e93acd1026fbb49","first_seen":"2026-08-04T14:24:23.13476Z","last_seen":"2026-08-20T21:40:04.832202Z","times_seen":372,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/captcha-De9rLtIA.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.950Z","timestamp":1787240647950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/captcha-De9rLtIA.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-43e2\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17378,"size_decoded":6699,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16953)","md5":"7bc8f78ad53d25e37778bf618c71b93d","sha1":"74f1045e49fb2c38fd202317b2ccf22b87815c0e","sha256":"ef191fcf2b1f9fff7e9cdb28f1050b190559ea6df17ea7978095ed5e8414872d","sha512":"bf9d68b72cf09e16f29982ab7447a38358a8939e702c0e05badf70ac678e66f3eb25b30484720cafc640e88921ac668267a627266e9168d900f03d0f10702f65","ssdeep":"384:rMAIkrm3/tkgyDg1mxbL0xO5/mLoYHkqyTS1DTe+eksJJ2Ec8iiDQUbKPtdBxlt:AHJGL0Q5/mLogkpTCDTe4sJWJaKPtjxX","tlshash":"24727458f35a5aed0a3ab526c52f0603b126ec17ed1c84547fcc79f02e5ad075232eba","first_seen":"2026-08-20T15:38:15.853006Z","last_seen":"2026-08-20T15:45:01.645888Z","times_seen":2,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cevents.chengcaiapp.com/api/event","fqdn":"cevents.chengcaiapp.com","domain":"chengcaiapp.com","tld":"com"},"ip":{"addr":"172.67.152.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:09.913Z","timestamp":1787240649913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chengcaiapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 12:36:03 GMT","end":"Sun, 08 Nov 2026 13:35:52 GMT"},"fingerprint":{"sha1":"A8:3C:36:DE:6C:C6:71:AD:5D:2C:A3:53:FE:F0:4F:EF:F4:78:C7:EC","sha256":"E0:DF:C1:79:01:80:AF:5B:22:08:5D:97:B9:BA:6C:B6:EC:B9:67:4B:27:BF:93:5C:B7:8C:84:BB:CD:DD:9C:3C"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: cevents.chengcaiapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 336\r\nOrigin: https://portal.fxcngold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":336,"data":"{\"n\":\"pageview\",\"u\":\"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\",\"d\":\"c3e6574d019c7a5dba8a16b40bf8596e\",\"r\":null,\"w\":1280,\"h\":0,\"p\":\"{\\\"Application\\\":\\\"CRM\\\",\\\"Client\\\":\\\"TMGM\\\",\\\"Version\\\":\\\"3.8.7.1\\\",\\\"Relative Path\\\":\\\"register?node=MzY0MTIz\u0026language=zh-Hans\\\",\\\"Platform\\\":\\\"pc\\\",\\\"Desktop_Version\\\":\\\"\\\"}\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://portal.fxcngold.com\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nset-cookie: __cf_bm=hYK.99ogZ42kYJrkJiTHd5rYsqLCBr6uANCe_4e3gpg-1787240649.9653513-1.0.1.1-a1gUx_ASW1BiKGzGle1rUVtSnY8UYmh6vMmuwk_yMsdv7hewHlUlYlvW1zxqDstDO2gbVtm00dphocSYaaSik_MhlHsD5gjUiEu6I.uxgmXGEtnRKBtQS0dZdewJJ9Bi; HttpOnly; SameSite=None; Secure; Path=/; Domain=chengcaiapp.com; Expires=Thu, 20 Aug 2026 16:14:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfAaCttWTeWwejLi1ieFqdh2f2fY5a4AK%2BWLnbDUxwbeRxPZktrzft89ccd3qytMkOjErLIA%2BhomrEmTX9NWZV3EpdPInjPZi8OeL4rHx5ZtXKGPfsREmEHxxon7pdcxbGk5SduOHj9ImA%3D%3D\"}]}\r\ncf-ray: a2e2848e4ebf2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"hYK.99ogZ42kYJrkJiTHd5rYsqLCBr6uANCe_4e3gpg-1787240649.9653513-1.0.1.1-a1gUx_ASW1BiKGzGle1rUVtSnY8UYmh6vMmuwk_yMsdv7hewHlUlYlvW1zxqDstDO2gbVtm00dphocSYaaSik_MhlHsD5gjUiEu6I.uxgmXGEtnRKBtQS0dZdewJJ9Bi","quoted":false,"path":"/","domain":"chengcaiapp.com","expires":"2026-08-20T16:14:10Z","raw_expires":"Thu, 20 Aug 2026 16:14:10 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=hYK.99ogZ42kYJrkJiTHd5rYsqLCBr6uANCe_4e3gpg-1787240649.9653513-1.0.1.1-a1gUx_ASW1BiKGzGle1rUVtSnY8UYmh6vMmuwk_yMsdv7hewHlUlYlvW1zxqDstDO2gbVtm00dphocSYaaSik_MhlHsD5gjUiEu6I.uxgmXGEtnRKBtQS0dZdewJJ9Bi; HttpOnly; SameSite=None; Secure; Path=/; Domain=chengcaiapp.com; Expires=Thu, 20 Aug 2026 16:14:10 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68,"size_decoded":1235,"mime_type":"application/json","magic":"JSON text data","md5":"8c4c6bdb73e4d5d7f409101ae3c90883","sha1":"b02b6dc977dc06eb8b9bfa2017b927cb7a98ea78","sha256":"3a9e4a851b124075058825f8a86c3b3b5e29b76c71b331b12b53e3474e96585c","sha512":"bf9888ccef6c368308772348cac0bfa341141c7ed4a1095bd42ec4f1b0356417dea410187b19c014c5f7855ba3d7c8b905bd2334f5baeb1e1cdab639bc5184a4","ssdeep":"","tlshash":"56a001c55f295aa99b9241a1ba19252c00a8767265a8a84aac5d652941554332081aa0","first_seen":"2026-08-20T15:45:01.647506Z","last_seen":"2026-08-20T15:45:01.647506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":-1,"dns":40,"connect":12,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgm.zendesk.com/embeddable/config","fqdn":"tmgm.zendesk.com","domain":"zendesk.com","tld":"com"},"ip":{"addr":"216.198.53.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.929Z","timestamp":1787240650929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgm.zendesk.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:36:49 GMT","end":"Tue, 20 Oct 2026 18:36:48 GMT"},"fingerprint":{"sha1":"30:47:A7:3A:48:47:FA:F8:7F:48:CC:D6:12:B5:BF:74:44:99:49:61","sha256":"BF:5A:EE:C8:17:1F:19:36:18:CC:16:52:96:76:FB:F4:62:65:9F:76:DF:C4:3A:38:07:0F:76:4E:C8:A2:CB:94"}}},"request":{"raw":"GET /embeddable/config HTTP/1.1\r\nHost: tmgm.zendesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://portal.fxcngold.com/\r\nOrigin: https://portal.fxcngold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600\r\nx-zendesk-origin-server: embeddable-app-server-6577c96c64-w7lq8\r\nx-request-id: a2e27c884e95eda3-FRA\r\nx-runtime: 0.003238\r\nvary: Origin, Accept-Encoding\r\nx-envoy-upstream-service-time: 9\r\nzendesk-service: embeddable\r\nx-cache-status: EXPIRED\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\nx-envoy-decorator-operation: /embeddable\r\nage: 329\r\nlast-modified: Thu, 20 Aug 2026 15:38:58 GMT\r\ncf-cache-status: UPDATING\r\nset-cookie: __cf_bm=A5WWU0s7sDC.KQ9anZc0Y16_GEj.rTMSVvfoOCNc3GU-1787240650.948384-1.0.1.1-T7nwnWdjBaA302Wqacg5GP25i4rHenTslQsqg.kehzmRHtp7g6urJ1nQVApB3.zuQWV3dNwRcbcAkbuuaJhQ0HGWOFSjZaiK.7q1Hr1nXNKrY9R77MgCUCv0H.BXn4Bf; HttpOnly; SameSite=None; Secure; Path=/; Domain=tmgm.zendesk.com; Expires=Thu, 20 Aug 2026 16:14:10 GMT\n_cfuvid=GJ3hyGmLpXV9drgE0jW37t9gk7DfyAeZ3AozS7sTOT4-1787240650.948384-1.0.1.1-NL4bhwo6Y4tzFrLAUubMcuW_rMRG1eskqMwsk4n.B0s; HttpOnly; SameSite=None; Secure; Path=/; Domain=tmgm.zendesk.com\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q2Eo6RqCJqBatewppeTmN84TBTX2aK3PL8l%2BkJx7HP8dnDljMi7asKqk3BVBiIbh1oaD3xcgl7ekEKdKM17u1yyq5QRkr3JCUyZuhuxkAsuWtv%2FlfJdu%2BglLjJCymISTYKo%3D\"}]}\r\ncf-ray: a2e284946f1a32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"A5WWU0s7sDC.KQ9anZc0Y16_GEj.rTMSVvfoOCNc3GU-1787240650.948384-1.0.1.1-T7nwnWdjBaA302Wqacg5GP25i4rHenTslQsqg.kehzmRHtp7g6urJ1nQVApB3.zuQWV3dNwRcbcAkbuuaJhQ0HGWOFSjZaiK.7q1Hr1nXNKrY9R77MgCUCv0H.BXn4Bf","quoted":false,"path":"/","domain":"tmgm.zendesk.com","expires":"2026-08-20T16:14:10Z","raw_expires":"Thu, 20 Aug 2026 16:14:10 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=A5WWU0s7sDC.KQ9anZc0Y16_GEj.rTMSVvfoOCNc3GU-1787240650.948384-1.0.1.1-T7nwnWdjBaA302Wqacg5GP25i4rHenTslQsqg.kehzmRHtp7g6urJ1nQVApB3.zuQWV3dNwRcbcAkbuuaJhQ0HGWOFSjZaiK.7q1Hr1nXNKrY9R77MgCUCv0H.BXn4Bf; HttpOnly; SameSite=None; Secure; Path=/; Domain=tmgm.zendesk.com; Expires=Thu, 20 Aug 2026 16:14:10 GMT"},{"name":"_cfuvid","value":"GJ3hyGmLpXV9drgE0jW37t9gk7DfyAeZ3AozS7sTOT4-1787240650.948384-1.0.1.1-NL4bhwo6Y4tzFrLAUubMcuW_rMRG1eskqMwsk4n.B0s","quoted":false,"path":"/","domain":"tmgm.zendesk.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=GJ3hyGmLpXV9drgE0jW37t9gk7DfyAeZ3AozS7sTOT4-1787240650.948384-1.0.1.1-NL4bhwo6Y4tzFrLAUubMcuW_rMRG1eskqMwsk4n.B0s; HttpOnly; SameSite=None; Secure; Path=/; Domain=tmgm.zendesk.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1636,"size_decoded":2352,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b3ca353a5d7acc2b0af46f6fcb893c3e","sha1":"4c0f60dcc10077ef51d688d05f229191fbfe818c","sha256":"650fa3cdb63989efc2c99f3e282292749f1b9e2f195d3bc833205ad1d87023be","sha512":"9ad474f38681e969017dcee09aa0f2fc39e948989d39e3d14671a35d4b98b0162cee310fe1c45b2e92581c31b9f0b8249ebf574a66d7af6345bfeb4fa87a0774","ssdeep":"","tlshash":"6731a6988d0d74bac486c262d0957e032b7e8a7b53a43568f8cc580990eb1ee1682b67","first_seen":"2026-08-20T15:38:15.832276Z","last_seen":"2026-08-20T15:45:01.650128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":14,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgm-prod-resources.s3.ap-east-1.amazonaws.com/settings/logo/cHlPyeA4vUnKlignm9T4sR4vWY6cvYfoIZvyZcEa.ico_1628301683","fqdn":"tmgm-prod-resources.s3.ap-east-1.amazonaws.com","domain":"tmgm-prod-resources.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"3.5.214.245","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:11.135Z","timestamp":1787240651135,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /settings/logo/cHlPyeA4vUnKlignm9T4sR4vWY6cvYfoIZvyZcEa.ico_1628301683 HTTP/1.1\r\nHost: tmgm-prod-resources.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BCkDHZGhINwfYZ6Bxbhx06DWT3INP/tQNbqvFAJOKBYJ8xLcL7hzatAB6Gw2RI20kafGWNRdD+bDSZWWw4hadm3d1lr4Fr16\r\nx-amz-request-id: FPESH76Y408ZB8SZ\r\nDate: Thu, 20 Aug 2026 15:44:12 GMT\r\nLast-Modified: Wed, 04 Dec 2024 12:53:56 GMT\r\nETag: \"cb0475df34277d51278b1c35daebcbea\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-last-modified: 1628301683000\r\nx-amz-version-id: null\r\nAccept-Ranges: bytes\r\nContent-Type: image/x-icon\r\nContent-Length: 45126\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":45126,"size_decoded":45610,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 8 icons, 64x64, 8 bits/pixel, 48x48, 8 bits/pixel","md5":"cb0475df34277d51278b1c35daebcbea","sha1":"a990a41493bd55e0a222b1c6b46771cdfc2b65ea","sha256":"96c7307828407236d5c0468d18d59f2713ef47d884cef4da53a23471d8ad45a2","sha512":"18e142860affcfaad2f5176b2c7d90ec8c7d6813715c6d918b87e1165fc3318ac50b69279a7426ef600ccc6adacb72d2b753b5a7c86d8ecaa11dc17500bf002c","ssdeep":"384:qmQyEDqytsKDTzF3kguvlq5wwKQ+NCTzH/c+qxZPQahLj4VbtM4cDSJ9r2:iyEuyjDWhewwKQ+NCXH/c+qxZr02Lgr","tlshash":"17130a0d16692731dc6a3638cf31883dafac5f48a571eb4ea550b6d8b33318ab720437","first_seen":"2024-12-11T15:34:05.718297Z","last_seen":"2026-08-20T15:45:01.627798Z","times_seen":15,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/useAuthFooterData-BtJo_o99.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.911Z","timestamp":1787240647911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/useAuthFooterData-BtJo_o99.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 729\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\netag: \"6a7c3832-2d9\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":729,"size_decoded":1208,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (728)","md5":"8f0444caea6f327b69089d528077e895","sha1":"79940aa2395a5c2c7379abca5c0d2aa59fe25fb5","sha256":"a3013d06762aa2109f7d1d4303b0418ef17a300638a61298b0d3ce61c7a5a4bd","sha512":"308c1c4b7cbdea6fd8996369e79b0f643fab76e24459a120f3eb7319d101f896db322a2054481083699f5d3e63d5a663f26ab525f7cd3b7eca02e28679e9ed92","ssdeep":"","tlshash":"a80110df31c9dbb8134614c28a001aa5a3052314ed5987ffe23e6d570b10428f3bf816","first_seen":"2026-08-20T15:38:15.855242Z","last_seen":"2026-08-20T15:45:01.65185Z","times_seen":2,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/tailwindUtils-D_ovc0ei.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.914Z","timestamp":1787240647914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/tailwindUtils-D_ovc0ei.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 530\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\netag: \"6a7c3832-212\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530,"size_decoded":1009,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (529)","md5":"0c471319d84388a0be8e61aac73b7b67","sha1":"2bf07e4b04043aae15f35145743576948af924fb","sha256":"d40de14a23a140dac1d3c04c55886f8597fac43e73382ce84754c158c1ced84f","sha512":"c4274260b4654dcf65716046bf820b0062b2da78b4898264a8e3ee2ff02c3aa6400027b434d5d80403af094db7566caa3c39b18e397042303cb73d7e38ddcf76","ssdeep":"","tlshash":"daf0be2c5732ee7414405cfaa4a08c938878a587d623cc1193cfca71a7ca8449a7abb8","first_seen":"2026-08-20T15:38:15.820483Z","last_seen":"2026-08-20T15:45:01.65342Z","times_seen":2,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/useValidation-C6adAuiW.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.952Z","timestamp":1787240647952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/useValidation-C6adAuiW.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-e13\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3603,"size_decoded":1668,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3602)","md5":"9c97114222c12b4b02f35109210b0521","sha1":"d521411e4bec9d46ed37c1e80df88ee1ea20b6bb","sha256":"1fd89ee7b0e3d8f38c93a16714cb653dd913fa1adde02eee688aa3419480b1e9","sha512":"406c114c0390b0797821e9427268b62acd879877e8c2d150468eb31eb13f55662e61e0119ed402b04c4d28e6031a9ebbfb55f0efce350e060eb25ee49831fa98","ssdeep":"","tlshash":"2171db88a286a6772df92cd8727cd0c3559e07906ded9c23c2e26d376676ed4ca1f700","first_seen":"2026-08-20T15:38:15.857153Z","last_seen":"2026-08-20T15:45:01.655058Z","times_seen":2,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/ThePhone-BUUZrNaV.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.958Z","timestamp":1787240647958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/ThePhone-BUUZrNaV.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-954\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2388,"size_decoded":1610,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2387)","md5":"4839440a702b11af665d9fd8cf59f52f","sha1":"1de0f1467a8b1fa86ee7d8d95bb5b8565fa22274","sha256":"e6e6e809c0e9de67292305936c7e8e7b6259d47d4e09c225315c9c2bf37e2e26","sha512":"40261a5558dd020814f8f43a216ed8226816d023b678e0adfe79e85b8daaae5f1783568c02ab2f24af4b6f0f70936a2b6378f09813101de0dd19b091bed5bf82","ssdeep":"","tlshash":"a841830eba98c7b6fafb82d4b02604146b0c6f9ed538008a98ed1f222709df5466d718","first_seen":"2026-08-20T15:38:15.899077Z","last_seen":"2026-08-20T15:45:01.656831Z","times_seen":2,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/useCommonInfo-BMnwy2eO.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.960Z","timestamp":1787240647960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/useCommonInfo-BMnwy2eO.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 409\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\netag: \"6a7c3832-199\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":409,"size_decoded":888,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (408)","md5":"8d8b5ef45589a4bf8693433a353df0da","sha1":"983484f1bd740469c886a0095b6eb5b8726cd3c1","sha256":"c632a24f8bdd45d04eb5788002d040064e2dc13682dc0d23dd0c62a253e35a91","sha512":"6fa1c383747984acb8ea9ed25becace766711bf57ed95cddcb3af4ea707ec4c96bf5eda52299506dd46da3dd0eb069e81d385a2ad4a7f62e36c92dacdc332cf3","ssdeep":"","tlshash":"14e0abca30c79071839c68db459a2722232dce64295c87d5e15946f00e27a41c36ff59","first_seen":"2026-08-20T15:38:15.909122Z","last_seen":"2026-08-20T15:45:01.658407Z","times_seen":2,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/index-C5kpc1ZL.css","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.965Z","timestamp":1787240647965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/index-C5kpc1ZL.css HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-16c6\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5830,"size_decoded":1925,"mime_type":"text/css","magic":"ASCII text, with very long lines (5829)","md5":"d52c09cfca4d5c12543eae429b9ee728","sha1":"00ae62468e54eddc2544ecfe883a224ca80f7e84","sha256":"a35cb863a53e4c54887e0f0a1e93074b54d82ef346e893b40b461898d00d75e2","sha512":"d522a03651cca5c8519dbe80c71385b648b9f265e087405fbb7ee01ce7a2f7ca57f1236889a3ea0e1aba29d7e74b91e545c0e886359fe5c58401c1f49dc801e7","ssdeep":"96:Fn93Pmx/RUAhllxf301YH1dy4i/SuSlFGSjkcljOsMOZtm5bjcCWW6tam85qtXZ+:F93Pm5RUAhllxf3YlTsf23cJtsXN","tlshash":"20c147582b4da627357388fcccf65608d922e1d345098ac8deacf9249e431963b37a58","first_seen":"2026-08-20T15:38:15.873473Z","last_seen":"2026-08-20T15:45:01.659991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:08.788Z","timestamp":1787240648788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:45 GMT","end":"Wed, 28 Oct 2026 20:43:44 GMT"},"fingerprint":{"sha1":"B7:46:09:45:08:65:39:24:A9:15:3D:36:1B:A8:14:83:15:F8:BC:DE","sha256":"CC:52:63:08:35:24:92:7E:29:4C:2A:B7:08:DD:91:33:FE:34:AD:9D:58:2B:79:7B:5E:AD:4D:7C:C9:3D:9E:6C"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://portal.fxcngold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 00:04:00 GMT\r\nexpires: Fri, 20 Aug 2027 00:04:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56408\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":30780,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-08-20T16:35:55.324845Z","times_seen":9654,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":23,"send":0,"wait":10,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/api/languages/index?status=1","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:08.802Z","timestamp":1787240648802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /api/languages/index?status=1 HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/prs.CRM-Back-End.v2+json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nIf-Modified-Since: 0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:09 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 8000\r\nx-ratelimit-remaining: 7995\r\nx-ratelimit-reset: 1787240707\r\netag: W/\"a4f1d12ae0f50854e5e94467310276fb0cde1e2c\"\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5601,"size_decoded":1879,"mime_type":"application/json","magic":"JSON text data","md5":"fc9696f6a622091cc28fbbe9c9adce44","sha1":"a4f1d12ae0f50854e5e94467310276fb0cde1e2c","sha256":"8ba68e0ded2e8be43d8c5c0c0290ba999303c21e39900d730b7177552d87be64","sha512":"3467e6c09b045a0ad9bd26c33e0f08ae4ac6c334bc1c938379a2e46986ab131ddd98ad00e2535aa3e17b3e34fc045d5fccd571e09f4056e63f7bcdd401a7b10c","ssdeep":"96:xVbZbBM1cPCMdWMw7MHeMSlMJNMcd6M7MDCIeBMeRqoUMuJmMMTgeMYWMlpM6xaK:TFFMyPCM8MIM+MmMDMcMuIeBMBoUMUMB","tlshash":"4fc1f18a7d91c81f76e96290f0e23f0b7e50054bd564fca617faa81c44bb5a3305b4f5","first_seen":"2026-08-20T15:38:15.835003Z","last_seen":"2026-08-20T15:45:01.662116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/api/companies/show?type=1\u0026lang=zh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:09.533Z","timestamp":1787240649533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /api/companies/show?type=1\u0026lang=zh-Hans HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/prs.CRM-Back-End.v2+json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nIf-Modified-Since: 0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647; member_locale=zh-Hans\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:09 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 8000\r\nx-ratelimit-remaining: 7991\r\nx-ratelimit-reset: 1787240707\r\netag: W/\"294a5fd06c1407a25321aa0b3547a14af5922dbb\"\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":980,"size_decoded":1144,"mime_type":"application/json","magic":"JSON text data","md5":"7f6435dd86402341e06e5825caa713de","sha1":"294a5fd06c1407a25321aa0b3547a14af5922dbb","sha256":"a6b458cefaf9a5a1a6031aeae3efa01a85a2b41d3261f3c60a99c005cfa53a29","sha512":"462e3cbc944d5686bb1e31a9fdc201f51f7715d0465eeed565f72ad3e371e19df4daac784f870ac05b703206cbc2e408a0a740984981a0c3514e48211356453c","ssdeep":"","tlshash":"3611e1de6d21686847fc03d8dd591e4d8ae1032b66ed4173c0ff6e5e3156118b6c1538","first_seen":"2026-08-20T15:38:15.903048Z","last_seen":"2026-08-20T15:45:01.663659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=04eb2d06-328d-4516-a883-95ac22c6c339","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:09.914Z","timestamp":1787240649914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /ekr/snippet.js?key=04eb2d06-328d-4516-a883-95ac22c6c339 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:09 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: WpffOoCyEEvwlyobsIQsbVwT8Ny7QT5QRa04CXNxe/BkCDQKDnOg5Su8/t8gKyfqMwrQMkt6AYj0AyemFlKrPcWijUC9bfPS\r\nx-amz-request-id: B4PHZR5D4YD3VAHD\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 10 Aug 2026 13:44:32 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: n9tf5K7gpLgv37YcMiMMneJz7sRLMzYS\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 31\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M9vhTzafzTXu5Kft9E5Q92BHqfa7guL0yXtcmhPudSPOL2ayCOmqjghppj%2Fm%2FpLPOZbCIO5OgIN75DDNk5BmnJNwjdDTWMZnI2lUFBEGEX2ZpCXljgggg6faX7eyfBLF4ea6dsg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"2212d7d4bff592ce5ad0f95527713e85\"\r\ncontent-encoding: br\r\ncf-ray: a2e2848e0ee1a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9693,"size_decoded":5109,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9693), with no line terminators","md5":"2212d7d4bff592ce5ad0f95527713e85","sha1":"e982eaf7fdc71a87e03bffbedad8780ed58f4f85","sha256":"1da79e989f7ed098b77d20036920649850917664d9d5fc9f81e60af1f2767651","sha512":"c4870aa0742a4c023912637b9003ebd5b96b155e79db760265b4855355066541e72985d33df8d92f27e346651ffe459d2b57196efb158c17986b8f9ad4190109","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsircTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsTu","tlshash":"e912d8c6b1b2e47603a600e1603a9690f7651919360dc43cf97cecd6fd66d91863beb8","first_seen":"2026-08-10T14:14:14.654591Z","last_seen":"2026-08-20T21:45:34.609635Z","times_seen":567,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":12,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgm-prod-resources.s3.ap-east-1.amazonaws.com/settings/logo/0QOimFT4UpSDoXeFQgZXoCLcYPKc9t4HmX5sJkRY.png_1628301683","fqdn":"tmgm-prod-resources.s3.ap-east-1.amazonaws.com","domain":"tmgm-prod-resources.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"3.5.214.245","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.752Z","timestamp":1787240650752,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /settings/logo/0QOimFT4UpSDoXeFQgZXoCLcYPKc9t4HmX5sJkRY.png_1628301683 HTTP/1.1\r\nHost: tmgm-prod-resources.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6yRZtbLYja9xTMGXGGJXNv35y5gmmAkJwxE+w1g1DXlgDc1z45saiTMiXnrzJqxx/Pc7LqGCwA30bFqg+vhuLOcREW8OUd1p\r\nx-amz-request-id: 5H3P5NAZRDBF608M\r\nDate: Thu, 20 Aug 2026 15:44:11 GMT\r\nLast-Modified: Wed, 04 Dec 2024 12:53:56 GMT\r\nETag: \"a117a7174291b696796b3eb1bee8ae8f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-last-modified: 1628301683000\r\nx-amz-version-id: null\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 13996\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":13996,"size_decoded":14477,"mime_type":"image/png","magic":"PNG image data, 1024 x 298, 8-bit/color RGBA, non-interlaced","md5":"a117a7174291b696796b3eb1bee8ae8f","sha1":"9538f8dfeeabb5f213e71343b47d83622dad3d6d","sha256":"1c52280be7551715acbe69a50159d6fe876c30eebb5dc62855cc5580833d308b","sha512":"3004fbd3a0b62a8c818b04259244ebb9e6e10cf4ceea4efef7dca07e7996bec28b37fca3d1260b67e89ce346fc8163198b9314a20014cb849f6a821f7820e78d","ssdeep":"384:hSyvVyvIjgtDf71Gg3Flt1jSmG0/9qc+OM2q:ndGDz1j1ltR5oOM2q","tlshash":"d752b087d032ce92f956163358728d1850ab46eac1739eb9caa44de397f43c33390997","first_seen":"2026-08-20T15:38:15.906125Z","last_seen":"2026-08-20T15:45:01.66579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-1261-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.892Z","timestamp":1787240650892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-1261-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: YznhBlTyQ6vn/j3ov4bf/TNH0V8RqJq4ss8wgFYQRquX4cXz12N9GVesu21SerXX4KfWHCi9LTc1e2ao53pUd4V4x99VfCLI\r\nx-amz-request-id: 7ZANVKX3QR5NER8G\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:28 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:27 GMT\r\nx-amz-version-id: UNHZxkfj9u7yvhCEFLLe7sqWrefesL0c\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 628657\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AW06ON2Nsrhvb7ojw8P3Kx0NitNi3iKDAUIJdcTLnA%2FPCUmOMb5%2Fslk8FW7QMbYok8Y1MTzI6ISnpEnTxNJHkfT2CjX9pZ9c00Z7C%2F8mDx9Q2IAU7fVaZQUfiBmamn%2FU8lCxzEk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"27c8404bcf79c6e5c252efd08a44433d\"\r\ncontent-encoding: br\r\ncf-ray: a2e284940db9a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15078,"size_decoded":6432,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15078), with no line terminators","md5":"27c8404bcf79c6e5c252efd08a44433d","sha1":"1761155445f85cd7398c110365bfc34837a9860f","sha256":"43fb23e965352b83a170f373bdfe2e1e7c257d09c86f962824345ea978728b0f","sha512":"2236fdb3f16937b0cd65e87b0561b9c6488d1859da76fc1ac3c64a31db9d60a8a7c0d9f9a3f4cf4805cd402d6456dfd75a4f7dd59326aff0038ec9afc3ba835b","ssdeep":"384:UJpiRM9BTeFSi2PShot0sil39Kkzio+AYWOt5AYih0cCwypytCY/0CXFgOeeQDPP:UJ+M9BThShot0R39Kkb+AYWOt5AJXCLn","tlshash":"a5621ae4d162b81927f7c4cc90e24a14ab696500b0174fe5f26f7dab437f8cc549ab2e","first_seen":"2026-08-06T14:46:56.388048Z","last_seen":"2026-08-20T21:40:04.853226Z","times_seen":222,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-7901-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.894Z","timestamp":1787240650894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-7901-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: iPUaRLOo6taA5CQ6DeRBS3w2cD+VQ2UwmrKSThuVRtIM+SeFEkKvrg2gu4ywyFBmt+a+V0MUBEv4lhjii1fkfu85+r/kz9EM\r\nx-amz-request-id: HZR026S7F6VRYEJZ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:29 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:28 GMT\r\nx-amz-version-id: bRy2q0XoGaB1TIWuhNlTQ4sxIB7oRHi4\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 511356\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6VaMEBvSceUJe14XwRtRDBiovv%2BbiZWrypgw1NIo2PY0A2TrpQgqx0HpXBOAwmy8oHCMcjpJi7aegVOGxJMASY7WCq0RhbOCx5%2BPRl5BHJN9ulSMBC7M82VIJpKaUS1xF4uinI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"564b7cf01b6881bd8f08419ad39390c6\"\r\ncontent-encoding: br\r\ncf-ray: a2e284941dc0a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42858,"size_decoded":17039,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42627)","md5":"564b7cf01b6881bd8f08419ad39390c6","sha1":"92e8297788261aac1f5ac81dbcf2e64fd1f95114","sha256":"4bf50c15b67fa91b8d5cf9a6ba3623dce4571294e9bd38989d3ab77dc0dffd0d","sha512":"0295bc518d726576be5306e0bf4afb96c2b73a360ba01e9c6195b80bf0af4ece665f9b36116b2da933d6690eb333607b502cd8674728d96d907c30520c10be20","ssdeep":"768:XHOuFxLlUriN2IZz/zuOOMB59HN+RenWDCv4mrOMpND2j8yMld5XVVeBcsFY0D04:XvlFzjx+Eccza8HOFY07LPVUAe6y9bBM","tlshash":"0b135c55b851b8729bdbc1d9407f9a09b23d241e740d8090f7c9ecf5287aa8a60b7f1f","first_seen":"2026-08-13T10:51:38.85228Z","last_seen":"2026-08-20T21:40:04.838139Z","times_seen":113,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Mulish:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:04.334Z","timestamp":1787240644334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Mulish:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 20 Aug 2026 15:44:04 GMT\r\ndate: Thu, 20 Aug 2026 15:44:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25599,"size_decoded":1618,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"aeeefe8d46b43225c23706f20c196a33","sha1":"ea62802b50c64835a7e6297331f3a0e87a77dfda","sha256":"1a3df2fbeee17682d2481dc1cad5462e80dceb00cd57fa7fa3b4f6dd81bebf26","sha512":"8e19db5b9c4c16ccaef8aff97b70c6a36ed9ec11e0e5a82b40351099d71c84e54e758b14e3ca4819234f03986d3f6b605a98f809a2245edca718c40f8b69bd30","ssdeep":"768:ukpZaPzO+92KnX0FZ0kn8w9tOTvSChqWbL4DZukQc1uujH78XuKeifUup9h2Nuw1:ukpZaPzO+92KnX0FZ0kn8w9tOTvSChqT","tlshash":"6ab2b9a2005ba040eb472cc17bcf7e36ae8fe1557052c57a6bfd59d99c9ac621368b0c","first_seen":"2025-09-27T14:10:56.414432Z","last_seen":"2026-08-20T15:45:01.66857Z","times_seen":29,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":37,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/tracking-Cgn0dth8.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.164Z","timestamp":1787240647164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/tracking-Cgn0dth8.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-fca\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4042,"size_decoded":1948,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4041)","md5":"0913f762324e7911d6327cf3d5109c31","sha1":"b8dc8f96c35205c66d13562590b5afb2c474f782","sha256":"a28a01dab46b862cf99ca383984c018b7ec070ceadcc8729c4ba53007566d0c3","sha512":"86cbfe8e8ce9fd206607a1dc7b65e29355ddb26583bfd9a9233f8b01a20805d974e9ff454d4230027697ce5ff0cd8f514b7fcceaff559ffa1d1f2579a049a9ee","ssdeep":"","tlshash":"f3815472301993e89add3da633f28f4bd1613a52755582ce952f9cd7e712e427cc202c","first_seen":"2026-08-20T15:38:15.842825Z","last_seen":"2026-08-20T15:45:01.669292Z","times_seen":2,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/mce-DBrELHDX.css","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.967Z","timestamp":1787240647967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/mce-DBrELHDX.css HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-46b5\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18101,"size_decoded":5299,"mime_type":"text/css","magic":"ASCII text, with very long lines (18100)","md5":"ea003f1079ef8dfbd54850375fd261ff","sha1":"8e115788c03b2d01a0e88fee06b98fc755497130","sha256":"5bfa5eda6fbce9457d06f4ef7593df75c23caa40a9fbaf333547123af7162926","sha512":"6fd50dfce67bf7a8df6aa4f1b5d728f3f8258c6971632178c327bc4f541f0801f4df605e4ff77e04c37b70d3997f2a5e69645f236da33a8155484a499c41b7b5","ssdeep":"192:CIM4RcpFRtncRgsW8sXKXw5wMLWATCnShXKd3EjOrVdr6iw74MWaMvxeFL0Xc:ODnM7xA5wj9d0j4dr6H4MovIFQs","tlshash":"288252fd10bd298725bf853becc7b34d5211599fd52a6fead9afe22089c8048a057313","first_seen":"2026-06-15T12:29:57.522233Z","last_seen":"2026-08-20T15:45:01.671114Z","times_seen":4,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":769,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-931-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.897Z","timestamp":1787240650897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-931-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: 4J7MH5odYC7QtY2fgB5gvgxeUsdVTV22hTcJ3Vy/pZtSO5BrMfNdnDg/aBx/LOc1RfGgG24sAxPbmKsKDvuQDrHb5iE6jPp6\r\nx-amz-request-id: B3P7R01E3A7K3TF7\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:29 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:28 GMT\r\nx-amz-version-id: Bd0pbwaeQ43XXVaS42jA39F3PZy7gngk\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 207389\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=stpPLwl5Ab8%2FG5iemfPz6su0W5xE%2BmXQUICBgjRWcgMC68gbOwJIc%2B0%2Bh0qfjlDVRI6JfP8IW3t1%2F9Px%2FwwRGMa3H6Hi8RQkEchUKaIotaT8Hu7HwknOG87vnUxMmYck8woRvjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"68346d6aea9edabf0ee588e2c5f4dcef\"\r\ncontent-encoding: br\r\ncf-ray: a2e284941dc5a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10677,"size_decoded":4979,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10677), with no line terminators","md5":"68346d6aea9edabf0ee588e2c5f4dcef","sha1":"e7783c4103b10658196ac4823c9f6e7998aadcb2","sha256":"7f76cb122858e9111555392deb3a473766ebdfa11cc17f450eaed386e4d414cf","sha512":"eee59e631a50bc813bbf02ad214b359c975546cc2e337e8b734ed6958792fcc6b65ef78e2d8903d7aaa4befae0056721fba9e741b5033b3f80ad2141e8e365e4","ssdeep":"192:6UJ3hoQ2n2IT4PSl5qaICFY635hGQVmp/Zo8pi54xnc+gPI/b0GSUWCizpUQmrFK:6UJ36Q2n2i4ql5qaICFY6JhGQgp/Zo8e","tlshash":"f322f81147861c3993e64ac534eb944c2b2f628cb41b42d4f27cbc6f83e69c47262f9b","first_seen":"2026-07-30T12:48:09.906144Z","last_seen":"2026-08-20T21:40:04.766596Z","times_seen":324,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-1606-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.899Z","timestamp":1787240650899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-1606-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: kY9nkDLRUcOk1IFhaloF1SP6HeIpn7MQmJoppRSM86FUuR6oANcbYwGV/+sWXiXD82fGmWsZcCg=\r\nx-amz-request-id: HZRD6BQCDN8J5XG7\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:28 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:27 GMT\r\nx-amz-version-id: nSAvLMw1fMbdxq7hcSa.nQ0BSOON_bkS\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 511356\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gfawValoX4Wq0rv7SSW8fulwurhWq7mS50K9ACLexuXeLeC3sLO0MZ9oVCV4NFbVKyDJhdKxj8TUa%2B1X1ozttUY%2BlcKhlHarwisclKHsM5a52CFIUYQcgrPA07BxA1xzhlWQW4Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"432decc07f6fa62e4a13766b3fed79ce\"\r\ncontent-encoding: br\r\ncf-ray: a2e284941dc8a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17104,"size_decoded":7329,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17104), with no line terminators","md5":"432decc07f6fa62e4a13766b3fed79ce","sha1":"fd842a41fb5d07b85d868daa3455a9003b92e03e","sha256":"43752091554c6a044be90a109ea4d76b6947e065c1a1f574f268aec40a878bbe","sha512":"4c68e4e302f2b86a886be610ce6987d4064a9547e647d498c2e34f9f91b564540e145d08cf97f851c43a9583e22d08f10b16c7126251455b190c1953b2f9948f","ssdeep":"384:eECZdF6jkPEiX1vVMeSKQH7BsawH9COjgCa5FBQ4mD+937nB:erZdZPEiX1qeSKQH7WawH9COjgCa5FBV","tlshash":"5972094d209324249e9b8ecda0fb116d233eb90c3c89416976bebcd607ee5d8315af56","first_seen":"2026-08-13T10:51:38.822049Z","last_seen":"2026-08-20T21:40:04.773115Z","times_seen":113,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/element-plus-Bg1HnfJF.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:04.341Z","timestamp":1787240644341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/element-plus-Bg1HnfJF.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-b8d29\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":757033,"size_decoded":240776,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b63567b834f754a672467d1fd11091b1","sha1":"8e5c372fe261aad611af0bea359522f61a223999","sha256":"6ea24e5566ab491935b95d4c334cd76ba132073f5b287cb783d79eda5b8975d0","sha512":"ec0125840d8a648b51453fb2e59fe08f4e2f207778bcc98072193fe1c2773aba42319ab4870c5930c1d23147dd44537d97bb02efc4a5f1c0c83d7037d6ecdb7d","ssdeep":"6144:rs6r6abYHpgRJxw6jkzawXSAqbnL3sR+Q6KBqOe04q5J8x5yHE5WNUAVtoQwONwM:rs6r6abYHGRJxw68fiTsHZTL20HoQwOp","tlshash":"e6f44ba8b559b47c57bf81c8407a0001672e5bdcb40988f0f1be8a78365bd64d1abfbd","first_seen":"2026-08-20T15:38:15.907222Z","last_seen":"2026-08-20T15:45:01.673461Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1463,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/api/companies/show?type=1\u0026lang=en","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.541Z","timestamp":1787240647541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /api/companies/show?type=1\u0026lang=en HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/prs.CRM-Back-End.v2+json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nIf-Modified-Since: 0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:07 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 8000\r\nx-ratelimit-remaining: 7999\r\nx-ratelimit-reset: 1787240707\r\netag: W/\"ba277c2003f5f4abf4573e86c3b920c7b82ddb7b\"\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":831,"size_decoded":1090,"mime_type":"application/json","magic":"JSON text data","md5":"a23c6b9912cb3929a2b23cfceadb48c7","sha1":"ba277c2003f5f4abf4573e86c3b920c7b82ddb7b","sha256":"645e019aab2c22437535965080ad72bd6f2ff24f37a4fc568a43cf5f1e96c47c","sha512":"30af2b0e0127f5f3e7f713174fc78d8399960768de34d4e7d290bad019dc9e054bd858103cbf7a88a80a5df9f927d3102f7720cf24312711cfc5a5901cd5f1ee","ssdeep":"","tlshash":"910141d93c66bc6537e11364bc1b17888ef6419ba3dc29b2841fed3c216f651b39a270","first_seen":"2026-08-20T15:38:15.848616Z","last_seen":"2026-08-20T15:45:01.674651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/AuthLayout-D93dmfXE.css","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.916Z","timestamp":1787240647916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/AuthLayout-D93dmfXE.css HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-ae2\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2786,"size_decoded":1273,"mime_type":"text/css","magic":"ASCII text, with very long lines (2785)","md5":"faa32627337b40ee8447ccfad2b6e637","sha1":"97bff478d2ece18e853c505a4661c486f305aefa","sha256":"401e246b8f3748eb9efc333bd8cf635db3fd8f71958da8f0161369029a4cefb2","sha512":"4a1656ded107071c8c40f8ade4f0b7754865fdf2c0c6c0c2ff5f89ebd9cea74aeb4f8a9619325b8c87b9e4dd909348689c2db07cd272bbed3f13c466dc55312f","ssdeep":"","tlshash":"fa51eba7232c622ca077c18690b31e9c3666b506e7af56af45d25dad4ece3c11d3268c","first_seen":"2026-08-20T15:38:15.919267Z","last_seen":"2026-08-20T15:45:01.675876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.293Z","timestamp":1787240650293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:45 GMT","end":"Wed, 28 Oct 2026 20:43:44 GMT"},"fingerprint":{"sha1":"B7:46:09:45:08:65:39:24:A9:15:3D:36:1B:A8:14:83:15:F8:BC:DE","sha256":"CC:52:63:08:35:24:92:7E:29:4C:2A:B7:08:DD:91:33:FE:34:AD:9D:58:2B:79:7B:5E:AD:4D:7C:C9:3D:9E:6C"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://portal.fxcngold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 00:04:00 GMT\r\nexpires: Fri, 20 Aug 2027 00:04:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56410\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":30780,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-08-20T16:35:55.324845Z","times_seen":9654,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/api/regoCommonInfo?jurisdiction=VFSC\u0026register_link=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans\u0026type=1","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.347Z","timestamp":1787240650347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /api/regoCommonInfo?jurisdiction=VFSC\u0026register_link=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans\u0026type=1 HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/prs.CRM-Back-End.v3+json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nIf-Modified-Since: 0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647; member_locale=zh-Hans\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 8000\r\nx-ratelimit-remaining: 7989\r\nx-ratelimit-reset: 1787240707\r\netag: W/\"9fdc86bbbc1172e36240062f8437a0efd452a7c9\"\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6687,"size_decoded":1520,"mime_type":"application/json","magic":"JSON text data","md5":"73a28cd464aaade4aa1a2f441273e559","sha1":"9fdc86bbbc1172e36240062f8437a0efd452a7c9","sha256":"4e2c0e6d93ae513adab3fa8268ac87316fae2e6e94cf241a30bf66709c74a49a","sha512":"40188f43e2fb39b3a6e5824286c048db49c73868fa919eda32dd4c266989e9d2e12be957611b34fa4358feafb0cb45672b0dfabd49ef34291088869d8e5f5267","ssdeep":"192:GwTwPwswbwqwowJwBwfwLwPwqMgMSDlD7T5k:uk","tlshash":"35d14f1828240d7f27db6ac57ec77d8965ad23cd06e4bc898751d9846ecbe4680338fb","first_seen":"2026-08-20T15:38:15.870896Z","last_seen":"2026-08-20T15:45:01.676988Z","times_seen":2,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-1313-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.895Z","timestamp":1787240650895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-1313-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: AOgvlHXhG/9co/ZEBFlmTwF7V5meG3PyzuFxTFaOThEGcFN5t7XsFVFhClXGyB7iGSmH4B2x0qMcX5Sql8/x/J66H1putH8y\r\nx-amz-request-id: 7ZAJFKMBG4MQSCVN\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:28 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:27 GMT\r\nx-amz-version-id: DWtZkx39WMlS2VVvGR6_7MlqTHpmdXR2\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 628657\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WxbKGwMKRhuARegAsgM%2Fkj5CL2dSiZcUewgF%2BPllYLsyJvUMM3SDdEQ%2FFlhoScHRTgikIy%2BIyT4DiAThRR25pjaLMTWRageSUUu3eO6GB3tGDMmgshyfl8vmjXyXOQZJ58LkqLY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"69f285ffcf7c5e83346d0ebdfc03091d\"\r\ncontent-encoding: br\r\ncf-ray: a2e284941dc3a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12229,"size_decoded":5955,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12229), with no line terminators","md5":"69f285ffcf7c5e83346d0ebdfc03091d","sha1":"1f052e85d75c5848758cf87d2615da4b87e4e98d","sha256":"79246b159b24559ed37454252d7d72b801db8925cc0dde5d3f494521bdac8069","sha512":"6c4a50c3cde63a60d8a80e6811fee72b57b304eca72c1407fdc4aeae14fba209949d7d40223b2a2707b06f5327505db06bd0062b044625e627d965578ca56db1","ssdeep":"192:1cCW6zr6f/M6qCJTkChFL8nntNIpF9VabEjSYHXo4Kzf89eDgB8x+zJOZzTxGura:1c96f6f/M6qCJTkCT8nntNIr9VabEjSQ","tlshash":"1a42fb5190aa287f23df45c93886981c362f2122b82e41f5f95dfd6a6aedd4d231339c","first_seen":"2026-08-12T15:01:01.47906Z","last_seen":"2026-08-20T21:40:04.840614Z","times_seen":123,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/subscription-B8-ZWy-T.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.954Z","timestamp":1787240647954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/subscription-B8-ZWy-T.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-545\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1349,"size_decoded":1191,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1348)","md5":"7c9588bc63689cf5a3255c92b1b20c4b","sha1":"112bba9fea63b81848186f6669772c31951e0c65","sha256":"8931964cc7cfc63f20cc58d649aa91a8a091eb5c4b4470eecbe2e7a537d6cef7","sha512":"2f8bd0856c47196a6067ef7add0f0582e2e0ade5fa203d3a324f95d992c5baf710f662f44f362716dd11f36d76b29115e5458bc9a47297105df2ad740fef0e2f","ssdeep":"","tlshash":"2421c9057da2f571d6ef28a59c77c21825390f86c522c0d48cda5e362e88ec6ce6b92c","first_seen":"2026-08-20T15:38:15.850394Z","last_seen":"2026-08-20T15:45:01.678678Z","times_seen":2,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/login-common-pc-CyXl4E6Z.png","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:08.791Z","timestamp":1787240648791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/login-common-pc-CyXl4E6Z.png HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 905103\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\netag: \"6a7c3832-dcf8f\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":905103,"size_decoded":905574,"mime_type":"image/png","magic":"PNG image data, 2220 x 3900, 8-bit colormap, non-interlaced","md5":"e0a652fc7c596088187d34141459dcb2","sha1":"1d0e1e7e0a83271a1c245804d93a23d1f02665ba","sha256":"26e5ee73177008deb4f0a7c8600c3d39df8d6d411990c94ff92eba086b443d76","sha512":"d2397e10a78daf1d2a6a99c4b071502bcd7a7a403df606da55ed0c3c1235d60e30298956cd2817f4c9b8525cae218cfb0a0e5040456c8516f60e7f5a386c90f9","ssdeep":"24576:A0PC/gowPLcRAhJh2Sf8sXTCPVL5EX0gLm:f0YcRU2nsXs9EXXLm","tlshash":"5315237d2577d15f2946b08697305bba1eb2b83021ebd8021d3871d3e46e44feda0f6a","first_seen":"2026-08-20T15:38:15.874943Z","last_seen":"2026-08-20T15:45:01.679644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/api/visiting/getExpireTime?language=en-US\u0026browser=Firefox%20134.0\u0026device_type=Desktop\u0026device_os=Windows%2010\u0026link_referrer=\u0026link_clicked=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans\u0026client_id=f11c2f5293fd6349793d308c1f643a10\u0026type=5\u0026node_code=MzY0MTIz","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:09.535Z","timestamp":1787240649535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /api/visiting/getExpireTime?language=en-US\u0026browser=Firefox%20134.0\u0026device_type=Desktop\u0026device_os=Windows%2010\u0026link_referrer=\u0026link_clicked=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans\u0026client_id=f11c2f5293fd6349793d308c1f643a10\u0026type=5\u0026node_code=MzY0MTIz HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/prs.CRM-Back-End.v2+json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nIf-Modified-Since: 0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647; member_locale=zh-Hans\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:09 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 8000\r\nx-ratelimit-remaining: 7991\r\nx-ratelimit-reset: 1787240707\r\netag: W/\"36791953129abe2f756a0675c3d5f1329523704c\"\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34,"size_decoded":640,"mime_type":"application/json","magic":"JSON text data","md5":"093be710c70f8143f044499061f7d281","sha1":"36791953129abe2f756a0675c3d5f1329523704c","sha256":"af7461f573f5507ffc6ad1b5dfde048831595ebd838fe811261996d02dc8b913","sha512":"80b60465cf142977bf2ea2f27d210fac9eccccb6c8d890599d6ac5fcf2cc4e693a2387321e0120003a3262633f9e33aac7383bc951afd99144fb2f50d7bd45d3","ssdeep":"","tlshash":"1580041d00c340c10f7055c147401703754c141014041101c357c40510404f15135515","first_seen":"2026-08-20T15:38:15.860418Z","last_seen":"2026-08-20T15:45:01.680558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/api/registerMember?jurisdiction=VFSC\u0026register_link=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:09.546Z","timestamp":1787240649546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /api/registerMember?jurisdiction=VFSC\u0026register_link=https%3A%2F%2Fportal.fxcngold.com%2Fregister%3Fnode%3DMzY0MTIz%26language%3Dzh-Hans HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/prs.CRM-Back-End.v3+json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nIf-Modified-Since: 0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647; member_locale=zh-Hans\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:09 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 8000\r\nx-ratelimit-remaining: 7991\r\nx-ratelimit-reset: 1787240707\r\netag: W/\"0ae02a333a6703e14fc688be1c0834159a568396\"\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17949,"size_decoded":3154,"mime_type":"application/json","magic":"JSON text data","md5":"0855adc486bf8f4cabfb6aa836611c57","sha1":"0ae02a333a6703e14fc688be1c0834159a568396","sha256":"78eddaa44590417ac7d8ebd72b7cb53d97adfdb424d8387b60ab0cab220d8590","sha512":"d639e9fe641e44dfc7c2a410edc9c8e50126cfb8e6661005766b0bec1b9f6c756b4eb5ec750f0d0cc37214958d0c625b1c855f5faed5d8e61caa96feff8b05ff","ssdeep":"384:G4Di5j4Y4oBlW4v4Bi4nL4mCX1tJw/2HD:7b7bC1tJw/2j","tlshash":"a382cb8532700d3f2796be80baa729c874993bcc06f5ace68761d9c57ec6d0541338fa","first_seen":"2026-08-20T15:38:15.845511Z","last_seen":"2026-08-20T15:45:01.682055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.290Z","timestamp":1787240650290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:45 GMT","end":"Wed, 28 Oct 2026 20:43:44 GMT"},"fingerprint":{"sha1":"B7:46:09:45:08:65:39:24:A9:15:3D:36:1B:A8:14:83:15:F8:BC:DE","sha256":"CC:52:63:08:35:24:92:7E:29:4C:2A:B7:08:DD:91:33:FE:34:AD:9D:58:2B:79:7B:5E:AD:4D:7C:C9:3D:9E:6C"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://portal.fxcngold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 00:04:00 GMT\r\nexpires: Fri, 20 Aug 2027 00:04:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56410\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":30780,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-08-20T16:35:55.324845Z","times_seen":9654,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-403-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.890Z","timestamp":1787240650890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-403-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: MO8su5NHDQrpMFd5pNjxXlAc0o2fmhR+DaKgWT8heFaVwonhlMuNIzPstMiPkPO0KnCT8qEVWfMSPZY3NYTYzXvDBxKDdIhe\r\nx-amz-request-id: HZR5987BQ2QM03X7\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:29 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:28 GMT\r\nx-amz-version-id: vx1w5JuesdcA1vAYo3v1nBWNt1q7kwd2\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 511356\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bhwLQvrvw1nTgLiFMDADtay8kGTGgtddpW74CB%2FVwS%2FDziYUUf4idK7BWVxINmGTZf6ax9kg5t%2FS2r%2F08Aqk6i%2B8IXj9vql5hv2Saw8yFvLdP8hNlECjJP1IcoqRuEIR708CQjI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"6bb6b1d655919a12ce6a1331872c8004\"\r\ncontent-encoding: br\r\ncf-ray: a2e284940db6a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8416,"size_decoded":5245,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8416), with no line terminators","md5":"6bb6b1d655919a12ce6a1331872c8004","sha1":"7dcfdfdc39098407e44880ff7b08412de53426d1","sha256":"fea2f6c237de5432a918ec047b135b524c112fa20eeaca7a2130f69b4f2dc655","sha512":"cb24c83ea4faec302423f17a52102155634deedb9f0988c599559146da17a6f31279f678bfe81b411158d98ed474c174eb0e3c968f749133559cb4c57722efac","ssdeep":"192:h7xi0KjeqBhCw6h+gu8m3AhnyP4hEi0r5c0Dix+8Kr7UdEW4zzauc:hg0KjeqBhXguKygmi0hyYUdEW4G","tlshash":"2402c699b562b0a5c32375a5417f011ef33eac68718e40a8f2a5e4d96c3e45da273f3c","first_seen":"2026-07-30T12:48:09.905002Z","last_seen":"2026-08-20T21:40:04.789767Z","times_seen":325,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/baiduMarketing-BL6KkG-j.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.165Z","timestamp":1787240647165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/baiduMarketing-BL6KkG-j.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-469\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1129,"size_decoded":1179,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1128)","md5":"3442ce09c96294e11c774f115e8fa8b4","sha1":"7b726abbd2c8f348dd6a93f63e6714f902ba1781","sha256":"34c66857d0c0c8185ccc77c744d115e8dcfa02eab53ffea490534f46bda14265","sha512":"bb4ee96d2a4ac061422071caf49e634c5e0af9a646739dc9f137e8ec7a7e1b6bf7b863ba563ef2a3e1fa8551b0a21d66285a363375f95c14500a3867b477342b","ssdeep":"","tlshash":"63219a2a2871e0fd03d2347eb63b4c12379129675b429064c1cc8885e903f5787763d9","first_seen":"2026-08-20T15:38:15.877525Z","last_seen":"2026-08-20T15:45:01.683661Z","times_seen":2,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/subscription-DXVaiucn.css","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.955Z","timestamp":1787240647955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/subscription-DXVaiucn.css HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 149\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\netag: \"6a7c3832-95\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":149,"size_decoded":613,"mime_type":"text/css","magic":"ASCII text","md5":"a4204899f586b9a87f829c85af1eb1f0","sha1":"cd91e574092835131ec9db4d1ef4f78cb544c4e4","sha256":"f253e4feaaa84a84f2d2951125c1e9f70be1b0271a452bd42d8bbf7dcd69b649","sha512":"b5b9641a1ce973152ae7e7ca587539099609dbedf84c1efd754417a149566aabba8989b7261a4b05fbf7fcdffab53378c4a4c0d616af76ee4a4b670975287659","ssdeep":"","tlshash":"33c04c569f2e1895b937813ed55019c96aa5720b8d610e61ed863416dca9081386f74c","first_seen":"2026-08-20T15:38:15.829312Z","last_seen":"2026-08-20T15:45:01.684868Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/api/countries","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:08.807Z","timestamp":1787240648807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /api/countries HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/prs.CRM-Back-End.v2+json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nIf-Modified-Since: 0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:09 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 8000\r\nx-ratelimit-remaining: 7995\r\nx-ratelimit-reset: 1787240707\r\netag: W/\"4bfa6086800c41bf5d160efe6dd90c5db99140be\"\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49561,"size_decoded":11047,"mime_type":"application/json","magic":"JSON text data","md5":"bcc7018129d9dbbd402a8438fe922bd6","sha1":"4bfa6086800c41bf5d160efe6dd90c5db99140be","sha256":"b9b80ae0bc63bf105294f4935b0cde970412f05e07dadcd063cc25d1efcc7e4e","sha512":"f88d8fe2ae861474f95de71cf30253d3e9419ecd358636c732b23a4de7a3139ef5a9f2f7174ee8d711cc20357c7316a6335992f9ae64bda4ccb7a848f1941275","ssdeep":"384:0kt45NvhQX5m8NmLJ2LY2MtjEj3jes14b4BFg9AE0kG4QpPY03eBtFEX4tP0xex2:0nNvhQX5m8NmLSMG3jes1YkSFEX4dMf","tlshash":"1623a15d51c84d6e28b783d84a4a572e22e4243393befd4dcef90a57277335da023ab4","first_seen":"2026-08-20T15:38:15.858193Z","last_seen":"2026-08-20T15:45:01.685716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/vxe-table-BiK6aQR5.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:04.342Z","timestamp":1787240644342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/vxe-table-BiK6aQR5.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-76296\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483990,"size_decoded":152921,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"7445d0320f538717509390b83a5d0ef7","sha1":"686904261cca9555c94b4febf4c5eae02683e3d3","sha256":"ccdd60da2f51859dc470777f532c940d364f806df77b70ee2666b2621ea77488","sha512":"8af4a096ebadbfa7dd022c5dd55b8cc1335907357c372e13b637c61ff0c5e1af2922b564af2d9ecb0c5c8580e5c7080efd85a84f7b8509146ee9f24a9d825425","ssdeep":"12288:9TMhnLWcZ0dhdtGmdeKmJPR0K3OwC8wKukXdDxMXn4s7R37fU2l:tMhnV0dhdtGmdeKmJPR0K+wC8zXdDxMb","tlshash":"4ca46ba73251b07283fd04e8c0aa0905b6250f9ae549d0f1f67ecd9e385a852e97ff1d","first_seen":"2026-08-20T15:38:15.876052Z","last_seen":"2026-08-20T15:45:01.686642Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1186,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18208205874\u0026cx=c\u0026gtm=4e68i1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.421Z","timestamp":1787240647421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtag/js?id=AW-18208205874\u0026cx=c\u0026gtm=4e68i1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 20 Aug 2026 15:44:07 GMT\r\nexpires: Thu, 20 Aug 2026 15:44:07 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 20 Aug 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157922\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454721,"size_decoded":158552,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"96ba423c4673e9807d1ce215fb4a0182","sha1":"3df1ab2658dae4d05043499306bd4a7b78601c23","sha256":"3378936a321ba0c6e639d0018b425686d74dd192a31a32dca9e07d538a626fbd","sha512":"689d4ace32924be9ab1b81ff4733d50a98feb054584605ef6a288d6802ca8eb3e0b8e5a0178d6d68615a702d244c057c5e7aba93b653035e122850ec9e9986d5","ssdeep":"6144:8WEeTs1y9qc0HRPMD04d8Z4yfpBjcR8eaEBy3zdzYcdS417p1g:8WzirHtMI4ryYcFz1g","tlshash":"eea4f8cdb3d674629396b478503f018ba57a79e2b84cc899f189cce42e7469a4133f7c","first_seen":"2026-08-20T15:45:01.687473Z","last_seen":"2026-08-20T15:45:01.687473Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.ahrefs.com/api/event","fqdn":"analytics.ahrefs.com","domain":"ahrefs.com","tld":"com"},"ip":{"addr":"104.18.39.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.549Z","timestamp":1787240647549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analytics.ahrefs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 08:12:36 GMT","end":"Sat, 03 Oct 2026 09:12:08 GMT"},"fingerprint":{"sha1":"84:19:A8:CF:39:BC:A7:8F:39:1B:79:AD:F4:E7:EA:E6:42:26:CB:EF","sha256":"4D:2C:16:B8:0D:0F:8E:F9:F7:1F:1A:EB:5C:92:79:A4:D4:44:A4:45:81:47:22:9B:5B:AE:2D:5D:F7:6A:D4:FC"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: analytics.ahrefs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 192\r\nOrigin: https://portal.fxcngold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":192,"data":"{\"n\":\"pageview\",\"u\":\"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\",\"l\":[\"en-US\",\"en\"],\"k\":\"+DgyFqQN+Eva8d4CIwgFFA\",\"r\":null,\"sw\":1280,\"sh\":1024,\"sr\":1,\"t\":\"TMGM PORTAL\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ntraceparent: 00-111e9ecc0f92422cb3bb3bd3a8dcc49c-605191eeaecd422d-03\r\nx-request-id: c0acf961-0457-47d2-bd05-05924ff34db1\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: a2e2847f3e6f568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":467,"mime_type":"application/json","magic":"JSON text data","md5":"1bdd82600d2859af8d96bbd39fc8a3a1","sha1":"8d876d917ce9efdda1bfc85727d421ab541a7861","sha256":"d42d95676a5fb59c33cf368c1c8fc71930805c1f4111bb007f02ca6bc05ed42a","sha512":"7a500f01a6c98df1379077a6768bd2e2451fc5f05703ce6577162d21869eceed475dbd288e8dfcf9dd6753ef1a15a0ceb121f4e0100e5a6c346b64b86506715d","ssdeep":"","tlshash":"a150000f000000300c000000000000c03c3330c300003cc000c00c0c00030303000330","first_seen":"2024-12-12T05:05:27.500171Z","last_seen":"2026-08-20T20:40:10.738238Z","times_seen":21603,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":13,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/Lang.vue_vue_type_script_setup_true_lang-DzZ3Ab_Z.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.913Z","timestamp":1787240647913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/Lang.vue_vue_type_script_setup_true_lang-DzZ3Ab_Z.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c3832-5d3\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1491,"size_decoded":1299,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1490)","md5":"82901cb47a2e3980007e35b8a75bc7f2","sha1":"73602d03fc4dbae3cbbedc3fe4b9c661dca984ef","sha256":"a9efdc620bb72756d67ce6975af014b974035a9ff56f009ccb7ce9ec1cd8f2f1","sha512":"6810ae8f108888fdfe8beda21b86adaf4a5c80930f1042f14762c0dea2734ebb8d659462be562d03d961e782084978ca3308e44570fc5e610c9daaf2bb810331","ssdeep":"","tlshash":"e431764d3c8ac6f8b347206421108454a24a6f29cd78f9d2b2fb2d3977b3d18966dba5","first_seen":"2026-08-20T15:38:15.85625Z","last_seen":"2026-08-20T15:45:01.689667Z","times_seen":2,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.fxcngold.com/assets/useForm-DQ9gm-9b.js","fqdn":"portal.fxcngold.com","domain":"fxcngold.com","tld":"com"},"ip":{"addr":"8.223.66.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:07.963Z","timestamp":1787240647963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxcngold.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:01:23 GMT","end":"Mon, 09 Nov 2026 04:01:22 GMT"},"fingerprint":{"sha1":"BC:E6:C9:63:DE:D1:50:9E:56:58:5F:8F:EA:54:E1:B5:F5:B6:F2:84","sha256":"B8:C2:2A:B6:31:3A:C3:1D:C6:3F:14:53:59:0D:A0:B0:DC:C7:77:E6:18:72:04:26:E2:DC:08:E3:5A:68:03:6F"}}},"request":{"raw":"GET /assets/useForm-DQ9gm-9b.js HTTP/1.1\r\nHost: portal.fxcngold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans\r\nCookie: acw_tc=2f3478e017872406437966199eff8263d0cab9d63a2e01671d805d1373c3ea; INGRESSCOOKIE=a80205446920f6f3dbeafd6834c4c2fc|250a01211f33dd800b99ee72dcbba1fc; _dd_s=aid=ee2157c7-370a-4374-aca3-190f85b3de2e\u0026rum=1\u0026id=28434966-bed2-4fc7-b0f4-5b0a213ebec7\u0026created=1787240647129\u0026expire=1787241547129; _gcl_au=1.1.1460800492.1787240647.-.-.1787240647.50746332.1787240648.1787240647\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 15:44:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 115\r\nlast-modified: Wed, 12 Aug 2026 09:09:06 GMT\r\netag: \"6a7c3832-73\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115,"size_decoded":593,"mime_type":"application/javascript","magic":"ASCII text","md5":"321ff632a02a3be62dec795838157f48","sha1":"947f6c8c3909eca38a016fd47e760d880b2d0a21","sha256":"a35bebe5a076aead2d38844985dedb649c5c5738c3bbc8e3da970390f87f17b2","sha512":"274b5ad2b8dade0012d3674f19b962b870286d71b265bad88d6b1bd1a8d65a8f632fc534fac57d2b43b02776958d0a1c2809662c65d68dbe9f655a17f40681a3","ssdeep":"","tlshash":"e7b09bc932e351b5591510ad716a855951492624254929429114555614588d04065705","first_seen":"2025-03-19T00:03:45.205567Z","last_seen":"2026-08-20T15:45:01.690466Z","times_seen":5,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"portal.fxcngold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-5433-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.886Z","timestamp":1787240650886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-5433-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: eBaQq34tF0dWazHdC/KAzs9foldMd7yQqoB0h3ZU43RPd80qc27UfAUoOQez4AwLybfF7wXBITyW6CD3ahyI/Ikp19E47UXO\r\nx-amz-request-id: HZR0CSYZMNYPRF6P\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:29 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:28 GMT\r\nx-amz-version-id: TCMEOgIiYpf2vfPHFXQNqguuh1ZaLxug\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 511356\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VOi596gIpfE8Ve0gQCr2i73MbJp%2FehUwbon1gsTuLIDT63zwQyOJK0cKNiTwmc%2Bbaja1ycZHHUuXlktTzFcKcupeYmgfj90SoOnSwqlDJImXEcLGfHFK7JGSh7c6ERro4aQI7DU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"171b58b17e374e6206422448bded11d6\"\r\ncontent-encoding: br\r\ncf-ray: a2e284940dafa41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446116,"size_decoded":143096,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"171b58b17e374e6206422448bded11d6","sha1":"2c33294f16e7db5be59d464017a53107fac81570","sha256":"9e665b0ebb461993e2dfee193d44dbb13b07496738b56455aa348a62b86aad88","sha512":"b37cffc400292711e83718dd3068070b69cdbe49f9dc613fd2d0fa4bf8fe89c1e95aecf241329783b0cd0d8dffc72233a79b289a035ff5be9b071d8a9a9ac463","ssdeep":"12288:4a0cVzek/5xbez05mYf12MpQtJxbeyarp35Z:4LEzek/5xbez05xfpQtJxbCrp35Z","tlshash":"c0942aea71a5b03247e70aa550bb0105b7355d54340ac1a4f22cddef3daa44ab2b7f3e","first_seen":"2026-04-29T13:00:36.23222Z","last_seen":"2026-08-20T21:06:07.723457Z","times_seen":3101,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-9076-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.fxcngold.com/register?node=MzY0MTIz\u0026language=zh-Hans","date":"2026-08-20T15:44:10.893Z","timestamp":1787240650893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-9076-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 20 Aug 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: tCcmhcQX2U6Ir6HudVikYY/JKNkfYzA4Zm/mlam8HHbXP9taaJWdIHZDlQXpPVrCv/0I3tMHs6dw1lIj3hgLi29Hm8cpzS4N\r\nx-amz-request-id: 7ZANF82M79HWZPJH\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:29 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:28 GMT\r\nx-amz-version-id: N2d7ID3NkWesWQ3lXkPvs4XkgAM2gUN4\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 628657\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6gACTKKjsrOXn3c%2BY%2FX4e9IREkh7su5joyWyiTHW3qOkfW5FJD2QYasqLVEMzuy%2BQEK%2B09SxXBI%2FCbTmFZeIS7WSeOyui0WZibFlxxrOf9a3kSrBB8WHsnIHEjWzOL8kNTPVG7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"cfa61bf1bf435802d0d20593dd275c88\"\r\ncontent-encoding: br\r\ncf-ray: a2e284941dbea41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57901,"size_decoded":20554,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57672)","md5":"cfa61bf1bf435802d0d20593dd275c88","sha1":"b481c48c4841acc3e790314a81b3b3b54a84d42d","sha256":"0c09cbd5f8f9084d8192cb74b9316eeca6bad914bb779417e67c43f0f6a6a15d","sha512":"1cebedd68af6a8019522f78fbb9bb40b95860dc6dfc64ea3ee8809515ead790fc1319b403f478cd311f9feaddebabaf2b20dbbfee73677b10ba3ebc2c34d96d6","ssdeep":"768:Xw2QkcbUUsLckTfdBY+vnB93AFv+Cv5tfgd2D+BUFpceIK7lXS8suDBz4QuAAPPD:g2FcZKckrXtvB9GKiFuE+","tlshash":"0743c589b591f0b157d35196802f450bf23a1938b04ea090f6a8d8f66cf9d9f903bf79","first_seen":"2026-08-06T14:46:56.368862Z","last_seen":"2026-08-20T21:40:04.778895Z","times_seen":221,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}