{"report_id":"41157958-1a23-4784-ab77-4d96376babb0","version":6,"status":"done","tags":[],"date":"2026-02-03T20:06:26Z","url":{"schema":"https","addr":"pc.exodusix.com/","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"pc.exodusix.com/#/home","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"title":"Exodus","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"pc.exodusix.com/","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T20:06:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":13,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45400,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.228521+0000\",\"flow_id\":555881866572062,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45400,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6036,\"start\":\"2026-02-03T20:06:09.700702+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45410,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.256607+0000\",\"flow_id\":1674712257245622,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45410,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":902,\"bytes_toclient\":3148,\"start\":\"2026-02-03T20:06:09.700854+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45418,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.273742+0000\",\"flow_id\":1197543538143759,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45418,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6036,\"start\":\"2026-02-03T20:06:09.700943+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45422,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.293270+0000\",\"flow_id\":2127560724034137,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45422,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6036,\"start\":\"2026-02-03T20:06:09.701017+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45430,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.299026+0000\",\"flow_id\":705765487784609,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45430,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6036,\"start\":\"2026-02-03T20:06:09.701089+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45438,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.313757+0000\",\"flow_id\":1323755447104236,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45438,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6036,\"start\":\"2026-02-03T20:06:09.701164+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45442,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.484753+0000\",\"flow_id\":245780932822732,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45442,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6036,\"start\":\"2026-02-03T20:06:09.952012+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45478,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.496007+0000\",\"flow_id\":1393718316861334,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45478,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6036,\"start\":\"2026-02-03T20:06:09.952214+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45452,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.517984+0000\",\"flow_id\":1170989902825232,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45452,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6036,\"start\":\"2026-02-03T20:06:09.952080+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45464,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.532493+0000\",\"flow_id\":1994496194742099,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45464,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6036,\"start\":\"2026-02-03T20:06:09.952147+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.541016+0000\",\"flow_id\":1070010926729178,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45484,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6036,\"start\":\"2026-02-03T20:06:09.952282+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45440,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.568344+0000\",\"flow_id\":614720771032660,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45440,\"dest_ip\":\"47.79.64.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"fa-echo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":902,\"bytes_toclient\":4662,\"start\":\"2026-02-03T20:06:09.951892+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T20:06:10Z","timestamp":1770149170,"ip_dst":{"addr":"39.103.20.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":40236,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-03T20:06:10.609462+0000\",\"flow_id\":1191457569506008,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":40236,\"dest_ip\":\"39.103.20.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"mifengcha.oss-cn-beijing.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":903,\"bytes_toclient\":1634,\"start\":\"2026-02-03T20:06:10.131800+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mifengcha.oss-cn-beijing.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":29,"received_data":121891,"sent_data":13915,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"pc.exodusix.com","ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":48,"request_count":24,"received_data":41088389,"sent_data":11123,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"webapi.exodusix.com","ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":17,"received_data":53418,"sent_data":9906,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mifengcha.oss-cn-beijing.aliyuncs.com","ip":{"addr":"39.103.20.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2019-04-29T11:41:12Z","last_seen":"2025-11-01T01:45:57.685868Z","alert_count":1,"request_count":1,"received_data":227,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pc.exodusix.com/assets/CommonMethod.8eedd4a3.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"bed6f735ee3eeebb47b4d8938a275fa3","sha1":"77440fd7e87c279f79e1421cc2138f79a5e94973","sha256":"1f55b9f50d93897c73f7e850794e523e52d16f9034118c4b969229a65c4a19d1","sha512":"2949028a739149ccb599fe862771e0f48516fcacd7f754268f2d651956529a35c3febae718841b396ff465c8916fee3bc2dc752c8f56efd31c9ef034c63af125","ssdeep":"","tlshash":"4a11ccd0e48dfb290368dba5a2248033f25d58b51e288368c0f95eb57b2d449b79ea30","size":871,"data":"","first_seen":"2025-06-07T20:38:42.155028Z","last_seen":"2026-04-10T15:03:13.149543Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/index.3224b3d7.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"419c8ccd9b1c34fd69f05b1db39893ee","sha1":"78a0b9debf2c6c996807f3c8d8b90ff015de39da","sha256":"5edd42d2a4fa0f6d45513fbbc935b7c780df6a904e5a8919a2f9c297f1ad097c","sha512":"af1495f379100798f8967444b7bdc01def2bf7b38b07c58eb2c21d425a43f1d7bcc74849c018a5aea625cba0ba52ea7db4cdb30d172fc66cf4b04d63a63da708","ssdeep":"768:+hPgUT+OS1wdB+8ro6k7y1khsjNc5nnIBVzJD0DdYBer1E:p60F2","tlshash":"89c261adf51e8a78f1f79851141c04463a4cbfd381508653b6fc3e15aba2ebc278d72a","size":27436,"data":"","first_seen":"2026-02-03T20:06:39.434154Z","last_seen":"2026-02-03T20:06:39.434154Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/core.esm.6acae16e.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","size":40515,"data":"","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-07-23T14:03:04.079671Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/en.7a364be2.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83402ecde13d2415a922eb1448617cdc","sha1":"b3c583462368b87a426a5fed7025b923726ddfde","sha256":"d3b258a01a6d267dc7a056c2fae3b0b0499c0ec6601a5f3c5752c8b16eeee51a","sha512":"a23f11da43b96ed86d9aa9252fea6865ce409d8e15d9971b422425d6d3555d8fc494a79f22ecd23a7dc3056e3797c1fce2ba1bfd96db6653b1a9139746e20d69","ssdeep":"768:U9tZcEw/od6rUOdAFsifnAcC2rAaAMFZoP6+6sPnhmDLrAIo7hspmwO6fpk7aOjD:hposUOdebw2rdFZjsPhHsujyWXjC8F","tlshash":"d643298e7e0a94aa09f3937679ce1f5020fa05c18265841f4bfcc5fc53e2b5a6367728","size":55246,"data":"","first_seen":"2026-02-03T20:06:39.483826Z","last_seen":"2026-02-03T20:06:39.483826Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/charting_library/charting_library.min.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-02T16:01:39.462111Z","times_seen":1325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b1d15130e24d2d2ac4f8a542c64e6f3","sha1":"5a8185ec47925eb372929d9dda66b89f552a6f5d","sha256":"11554f26422936407c1599c96beb7dd3552f2817fe74adaa4e530dcb938e0351","sha512":"cbf5398fe863b25156f48e606a3dbade6b1270df78bb648302094e179116ab82d3ed494fc433878e58db7601b3c810c4d1203b3a3e3a6ed12cbb85924befa711","ssdeep":"","tlshash":"b311abfe291aa02d6303804e976b7801642650b9001a184177ccda9dbb9ab7dd0cfb8c","size":1048,"data":"","first_seen":"2025-06-07T20:38:42.266028Z","last_seen":"2026-04-10T15:03:13.15175Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cda33e0e6a4d990f1937a5851b8f48ec","sha1":"42adeb9bc8945b924b2969a758038e1cc739e0d4","sha256":"cbd46fba023a6ae60b651ab181939a95f01a5df0e2a5100b42763c9bc214e337","sha512":"9d0a657f92926ea6fdc8c9a5bfa0f029e003b60fed9262ef422674f7f215c882a8a77cd646fa606454cefead42c655a7b85852ab70ddb02b64dc23bf82181b5d","ssdeep":"","tlshash":"4101c21a51b544b040abb33c9b6fa780223100d76408ae057e0e9f846f2863d5be0bde","size":729,"data":"","first_seen":"2025-05-11T21:27:13.391538Z","last_seen":"2026-05-18T14:03:31.943813Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/USDJPY.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /USDJPY.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 2313\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533AFAD5B3334338258\r\nAccept-Ranges: bytes\r\nETag: \"322B7674F7EBCE58FC2E593917D49A62\"\r\nLast-Modified: Mon, 13 Jan 2025 07:02:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2727740366450174519\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Mit2dPfrzlj8Llk5F9SaYg==\r\nx-oss-server-time: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2313,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"322b7674f7ebce58fc2e593917d49a62","sha1":"ec0b57913ada1ba8e9580eef74fc4bcf8ca457d8","sha256":"c1804e170148f825183cbd76fb67e9a3b0cc634d926b66c0ba084020726af9a3","sha512":"a84cde8f625a80d84e782fcddddd4ccce39897ff3bc248af09644db016fbaa6613bcb9f32460187a6446e4df472a11dd42fc29cd1e78677b512cc0dad943f465","ssdeep":"","tlshash":"d0412d39e2ca1fde8949e1d6bec885c4d7d648427764f8306c47c85629b847761798c4","first_seen":"2026-02-03T20:06:39.42299Z","last_seen":"2026-02-03T20:06:39.42299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2302,"timings":{"blocked":2001,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/resource/images/common/home/Selection-c.png","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /resource/images/common/home/Selection-c.png HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6623698c-13e0\"\r\nexpires: Thu, 05 Mar 2026 20:06:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"c1e0cfa54461cfe2003359fe589984dd","sha1":"fd82904639342a643be65d67f8a24c5d16e445b8","sha256":"69e6f084038fd9c2196d3349b6be282bb366b9b47c5dfdb07b917a4956eb79fb","sha512":"dc0feff751431464fb48d538ac9dca32103da30c468e078100a2625ea616500cb026aa75a54c1450ce37539a93dad647a82a91e7bacf2f7dad9b9f4e639e73fa","ssdeep":"96:Y3l7a2ASmDfKAw8m2QCvNLPHQt2sotAi4EbsxVcgqiT56IaZ/IvEKdRh7zUt2:YFyPmO1Q2Leilb6F56Z3KRI2","tlshash":"15a18f7b6ce42c16cf86e6d90f86130c2b94c06f01586e13541eaad90f708f8329e709","first_seen":"2024-08-19T17:34:46.646268Z","last_seen":"2026-07-23T14:03:04.067488Z","times_seen":125,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/index.3224b3d7.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:07.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /assets/index.3224b3d7.js HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pc.exodusix.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 06:43:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69770cf8-6b2c\"\r\nexpires: Wed, 04 Feb 2026 08:06:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27436,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27435)","md5":"419c8ccd9b1c34fd69f05b1db39893ee","sha1":"78a0b9debf2c6c996807f3c8d8b90ff015de39da","sha256":"5edd42d2a4fa0f6d45513fbbc935b7c780df6a904e5a8919a2f9c297f1ad097c","sha512":"af1495f379100798f8967444b7bdc01def2bf7b38b07c58eb2c21d425a43f1d7bcc74849c018a5aea625cba0ba52ea7db4cdb30d172fc66cf4b04d63a63da708","ssdeep":"768:+hPgUT+OS1wdB+8ro6k7y1khsjNc5nnIBVzJD0DdYBer1E:p60F2","tlshash":"89c261adf51e8a78f1f79851141c04463a4cbfd381508653b6fc3e15aba2ebc278d72a","first_seen":"2026-02-03T20:06:39.434154Z","last_seen":"2026-02-03T20:06:39.434154Z","times_seen":1,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getAllSetting","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14143,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13808), with no line terminators","md5":"e7754b3c71c52693f752c0e4f4dd747a","sha1":"0a89d8ac39ebe34c4db7a1b396a5afd38699708d","sha256":"14fec8b2b84fa2f61bf5f5707baa5bf1b3c7e99a146fa1709a6a29af4ffcb2bc","sha512":"606db6d5eea8e5be303a22005df322b829598db74a8994cd9076ddb399f6cb80d1ebf894e55d880ff669e160b843b7dbffedabcd6149cc99ee92ea08a03c4b93","ssdeep":"192:NvGdxtOSpQ+s1WA5+O+Ec275HHJrw2AmJ1lTq8gsGPzt2s0MMNrG8G9endw2AQy+:FjTOB2sMwrkO9/t0YC1UW","tlshash":"af52425632c8dcbec2e21dc5c46b768eb9dc34aba6409c55f8e7ee5c848dcb6444b04a","first_seen":"2026-02-03T20:06:39.435279Z","last_seen":"2026-02-03T21:08:54.796854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getMt5Amount?coin=xaucnh","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xaucnh HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nContent-Length: 6\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"xaucnh"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99d2c8efd43165aed8eb4ba605899277","sha1":"36f2a38d44097ed42ff716527063d94e88b53f17","sha256":"3c32cd504664a0ccab3a24bde398fac50beaa4d17629227497dc515dd43afaef","sha512":"0b3869b3806698f06d3d6d97944a6efecbb33db65d3ada271cf0893970b88b562744aa0b8ada29d862b624dddf32faf3fadb6c6261480d33f527568f81d7a377","ssdeep":"","tlshash":"9d9002651c2c8242e88320a995062244406431a0763492498c5e912580881722450858","first_seen":"2026-02-03T20:06:39.43664Z","last_seen":"2026-02-03T20:06:39.43664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/charting_library/charting_library.min.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:05.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Apr 2024 07:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6623698a-2a6a\"\r\nexpires: Wed, 04 Feb 2026 08:06:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-02T16:01:39.462111Z","times_seen":1325,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/platform/zhilian_light/logo_144.png?2.0.1712644837246","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:08.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /platform/zhilian_light/logo_144.png?2.0.1712644837246 HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:08 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-07T19:15:37.881733Z","times_seen":547189,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0361fd66b032441e7a9aeef27a462a087.jpg","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0361fd66b032441e7a9aeef27a462a087.jpg HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1687\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533AB4B8138328EA07E\r\nAccept-Ranges: bytes\r\nETag: \"D1BDAE92B669EDDF77DCB8DC87B9A402\"\r\nLast-Modified: Thu, 02 Jan 2025 03:53:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7745069834545942300\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0b2ukrZp7d933Ljch7mkAg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"d1bdae92b669eddf77dcb8dc87b9a402","sha1":"a8fefdabe0b6945c63a284067d21f09a0bbe2f0b","sha256":"8bf7a2722b0ad91f18d12a4a22c027bb84a7d48b986beffcfcd72e90c5fffd3d","sha512":"99032af46aaaf87ec06020c80f4082d6469ca405b893440ce2f367e24ebd31d23ce8585d442e3f795e07202cdc6af5db4e769857c452c92575c5c8d34d31d736","ssdeep":"","tlshash":"04311a9f286288ecbf8f495be1bf42a51830b0b49034d4bdcc2d549bfac9c5b0649dc5","first_seen":"2025-05-29T23:41:24.322973Z","last_seen":"2026-04-06T13:18:05.303086Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2027,"timings":{"blocked":1762,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mifengcha.oss-cn-beijing.aliyuncs.com/static/coinInfo/bluzelle.png","fqdn":"mifengcha.oss-cn-beijing.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.103.20.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cn-beijing.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:42 GMT","end":"Sun, 23 Aug 2026 08:21:41 GMT"},"fingerprint":{"sha1":"0E:17:E2:1C:49:2B:58:46:EF:6F:B8:CA:60:00:F7:D5:B3:39:DB:5F","sha256":"65:62:9F:A3:53:EA:8B:6D:C8:83:93:81:B2:E6:43:7D:E3:97:5C:77:5E:01:C1:A5:29:3A:CE:5C:62:0A:D3:77"}}},"request":{"raw":"GET /static/coinInfo/bluzelle.png HTTP/1.1\r\nHost: mifengcha.oss-cn-beijing.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:10 GMT\r\nContent-Type: application/xml\r\nContent-Length: 333\r\nConnection: keep-alive\r\nx-oss-request-id: 69825532140EF13938EC24E6\r\nx-oss-ec: 0003-00000905\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":1354,"timings":{"blocked":-1,"dns":395,"connect":237,"send":0,"wait":238,"receive":2,"ssl":481},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"mifengcha.oss-cn-beijing.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/EURUSD.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /EURUSD.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 2699\r\nConnection: keep-alive\r\nx-oss-request-id: 6982553393A7E9313282BE09\r\nAccept-Ranges: bytes\r\nETag: \"882290514372404DCCD05556FCCE1D59\"\r\nLast-Modified: Mon, 13 Jan 2025 07:02:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17992642749066705260\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: iCKQUUNyQE3M0FVW/M4dWQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"882290514372404dccd05556fcce1d59","sha1":"8591116ef80ef6c6ff727cae070ae4408d7dcc60","sha256":"88a9df5bf8d2777ee8e873990fb3001bde8494eb80c83ef26464b28054071c59","sha512":"242f30f77f97356f99f53931458a299547b89e4701b0a435b7df8bb1ccb25de824f1a0598b1a3276e5c12d9cefe1fa71edad9438ec013e688481708143b88f46","ssdeep":"","tlshash":"ee518ff1ade47b5a40cc99316fe681437b3418ce9654085e5f87d1f34790cc4444e02b","first_seen":"2026-02-03T20:06:39.442237Z","last_seen":"2026-02-03T20:06:39.442237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2247,"timings":{"blocked":1973,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/AUDUSD.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /AUDUSD.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 2972\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533ACF6C532366C2A0D\r\nAccept-Ranges: bytes\r\nETag: \"8177275CF5ECA12752808BC892644511\"\r\nLast-Modified: Mon, 13 Jan 2025 07:02:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4120034298828332978\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gXcnXPXsoSdSgIvIkmRFEQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2972,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"8177275cf5eca12752808bc892644511","sha1":"4854066431c494aa9e8c55fc19e2f8765c7f3b43","sha256":"7e1ba0466de7fb183e362ff075adf184fee481b449bafb9590f253cdd36ed447","sha512":"afc834e0f1decb5ff74ce7c9fb49d6d98a1175a7b7cd180d0fb2ad22742d37e53e12a8948b4175037a1512f124fd4d2a7c8d119e830f7fbc8a4d8670627930c1","ssdeep":"","tlshash":"11514ada9f68565bd06080a2030d48e2704449faf1fc447352a4bdade757bad65ab8c1","first_seen":"2026-02-03T20:06:39.443416Z","last_seen":"2026-02-03T20:06:39.443416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2592,"timings":{"blocked":2001,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/CommonMethod.8eedd4a3.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:07.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /assets/CommonMethod.8eedd4a3.js HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pc.exodusix.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:07 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 871\r\nlast-modified: Sat, 20 Apr 2024 07:06:50 GMT\r\netag: \"6623698a-367\"\r\nexpires: Wed, 04 Feb 2026 08:06:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (870)","md5":"bed6f735ee3eeebb47b4d8938a275fa3","sha1":"77440fd7e87c279f79e1421cc2138f79a5e94973","sha256":"1f55b9f50d93897c73f7e850794e523e52d16f9034118c4b969229a65c4a19d1","sha512":"2949028a739149ccb599fe862771e0f48516fcacd7f754268f2d651956529a35c3febae718841b396ff465c8916fee3bc2dc752c8f56efd31c9ef034c63af125","ssdeep":"","tlshash":"4a11ccd0e48dfb290368dba5a2248033f25d58b51e288368c0f95eb57b2d449b79ea30","first_seen":"2025-06-07T20:38:42.155028Z","last_seen":"2026-04-10T15:03:13.149543Z","times_seen":7,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0f9e62d7863f54d39ada323659fa6e210.jpg","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0f9e62d7863f54d39ada323659fa6e210.jpg HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2243\r\nConnection: keep-alive\r\nx-oss-request-id: 6982553293A7E93132BFBD09\r\nAccept-Ranges: bytes\r\nETag: \"304ABF3181C09EF01CB52061F5DC50B9\"\r\nLast-Modified: Thu, 02 Jan 2025 03:52:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2871216098384110039\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: MEq/MYHAnvActSBh9dxQuQ==\r\nx-oss-server-time: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"304abf3181c09ef01cb52061f5dc50b9","sha1":"2c96d3a437349f4695e4a6c671bf383f2784515c","sha256":"9c4afee726d377d43e508875c75fd30a28b4cb7ef49ac45dd85f1c0a5f4220e0","sha512":"81eb2efe3f34d15dc5c19932e807f009c8ca6641227807d764e524152cf540876f60d51092f8971609b8e0e36bca92a9561c29905ba84ad9eae70f01e1e7213c","ssdeep":"","tlshash":"ad412932e4d20f219a0bf40fa86f682928bde25c6156c73c249f9472128b42ede92488","first_seen":"2025-05-29T23:41:24.304594Z","last_seen":"2026-07-28T19:29:08.859826Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1969,"timings":{"blocked":844,"dns":16,"connect":270,"send":0,"wait":280,"receive":0,"ssl":557},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getMt5Amount?coin=xaueur","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xaueur HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://pc.exodusix.com/\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0aba8e89340f2400682e65de24fc3f5e1.jpg","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0aba8e89340f2400682e65de24fc3f5e1.jpg HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1721\r\nConnection: keep-alive\r\nx-oss-request-id: 6982553268F57938339B7DB7\r\nAccept-Ranges: bytes\r\nETag: \"89CF5AD8C480F4A55D6925FC628F5575\"\r\nLast-Modified: Thu, 02 Jan 2025 03:53:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18183737992525434775\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ic9a2MSA9KVdaSX8Yo9VdQ==\r\nx-oss-server-time: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1721,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"89cf5ad8c480f4a55d6925fc628f5575","sha1":"5be55de41d3295d8c754b7c96cda4827e77ca3c8","sha256":"0a057beabf626a17bf1613e22c6b3e157a5f053399ebe6cdbd94b0f98248cfd8","sha512":"c52a953f14b72b98ddd56027ede8d65c6f45f67f5afb478e2f425704ccab319c8af48a60fd39274752635d605e9f7cb501a7722484f98172f8b433408061da22","ssdeep":"","tlshash":"f1312b22ceac0e0936d41d39099c9e9125237d3bb0cd41f46c03068d4460c4b5c7e3bb","first_seen":"2025-05-29T23:41:24.321913Z","last_seen":"2026-04-06T13:18:05.326449Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2112,"timings":{"blocked":899,"dns":12,"connect":294,"send":0,"wait":312,"receive":0,"ssl":592},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getMt5Amount?coin=xausgd","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xausgd HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nContent-Length: 6\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"xausgd"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2a1e54890bcae0323fb66dc9f56e42ce","sha1":"c134f15614389d36299402c884f97de1808679eb","sha256":"cc593abe92628386e34a9adf3985c0ee65ca13e3677c2c9de708de5747e58cd4","sha512":"308f8607f486102979fb3110e629196e6ea0573651c37894760f8edecf6f4f199e63bcd721d5e38c559ae936dea18d9c3ec136652f4a87675fe4c19d9060fa2e","ssdeep":"","tlshash":"da9002551c1c9242a88310a99506120401353260662492484c59513980881623581898","first_seen":"2026-02-03T20:06:39.450163Z","last_seen":"2026-02-03T20:06:39.450163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.05934e2e05d4c47a6a66af888b512c3fe.jpg","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.05934e2e05d4c47a6a66af888b512c3fe.jpg HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2475\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533AB4B813832BDA07E\r\nAccept-Ranges: bytes\r\nETag: \"F20472B88DB8D665915F23843A5C345F\"\r\nLast-Modified: Thu, 02 Jan 2025 03:54:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6476007230303732984\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8gRyuI241mWRXyOEOlw0Xw==\r\nx-oss-server-time: 19\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"f20472b88db8d665915f23843a5c345f","sha1":"432cd3a9bcb3e91616b26347a24344cd62ef1d51","sha256":"a663b5e6fab2b49edd56fa5f2b4968bf0468a6ea6514527a52deab189875b35d","sha512":"ee37beb0ceaf0cecb43a449b17a778be7365f754fc3bea4da6ce9073fd4e21e08d3dcef1d3196e5730b88b8c2d5a50548b69c0b3a61a216323e66e3bb75789d8","ssdeep":"","tlshash":"65514d923ac07b34cb43bc15bb0365f45f9944aed16793000aa3fb3742750465e653d5","first_seen":"2025-05-29T23:41:24.356373Z","last_seen":"2026-04-06T13:18:05.359292Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2309,"timings":{"blocked":2027,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0f61026ec8cbe42eba002513b65a65dc9.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0f61026ec8cbe42eba002513b65a65dc9.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1629\r\nConnection: keep-alive\r\nx-oss-request-id: 6982553368F5793833917EB7\r\nAccept-Ranges: bytes\r\nETag: \"CD135D074A1896476A9B406129BBFBB3\"\r\nLast-Modified: Sun, 16 Feb 2025 15:04:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7474145581675919836\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: zRNdB0oYlkdqm0BhKbv7sw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"cd135d074a1896476a9b406129bbfbb3","sha1":"731c657d616f861d3a7a02429cda13465c89697a","sha256":"3aa81b1cd56155b93ce975e7ff72d82b80dd847a65c113f34e08bb7eb1ace36a","sha512":"bf94349194b4ec41e173564ee49e76d1b7060e23db9ec775543532b11729ec219f80e215ee41261e4a54a8b1c2146e50ef7a68196fe29fa76669a096e3039546","ssdeep":"","tlshash":"3b310afaf3007c05603b92771f320840e8503aebe3164f3a5b54ee1aa3e9499640711f","first_seen":"2025-09-25T02:41:04.479731Z","last_seen":"2026-02-03T21:08:54.85039Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2015,"timings":{"blocked":1706,"dns":0,"connect":0,"send":0,"wait":308,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/resource/images/common/home/investimg.png?1770149169778","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /resource/images/common/home/investimg.png?1770149169778 HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6623698c-12ec5\"\r\nexpires: Thu, 05 Mar 2026 20:06:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 960 x 960, 8-bit colormap, non-interlaced","md5":"9267ad6af6eaacc24390a8f33870ef76","sha1":"6541d731da0afcd1af6587e1b4c13bc5f1fe4d52","sha256":"aa6a9c639280f31ff25cd23af4f8cb4f12b731b972a4468ae251daad06117b11","sha512":"de85a8516252d1fc79ef5fd40ddc19ebd4e3f7ca0e933bb0ae91715748bde79cca7b3e650851d421dfa44e69236722340f17deacae4b2e83150aebfea98b9eaa","ssdeep":"1536:i4LGU8vqIyjyXqRwksQsohMUqQHwqO3X6GU0NSKqYN/o/rTTkPjtbG7jqs:i4LGWIyjyaGksQvLqQHwx97SKqC/o/rh","tlshash":"df73013bb7bc0646900205a14fb212e92b660cbbe647fc86fe711ea19936d2b5115acc","first_seen":"2024-08-19T17:34:46.66014Z","last_seen":"2026-07-23T14:03:04.071662Z","times_seen":134,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T20:06:04.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:05 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 08 Aug 2024 11:34:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b4ad54-100c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4108,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2147)","md5":"252458881bd42806f845b14938d45959","sha1":"33bb0e39a4debb39ea1e56322247e6bcdd8c6350","sha256":"67fc7fdffae5c799045b72f8661ed814bca94eb7094bfad9047e1de5a50be136","sha512":"694ad4fa4a7d378b1f50d35e048a7c6acfe88a536b5cb79406c8ef8112d7133f40d0c94fe1324fb8b1dac7b19be67b40bde9a2e696db57cbd52728c89806f080","ssdeep":"96:zn5Uuso/oWfQgwJg6/x6H2mUsGKAiowGTKADq2Tu:9DgWIgzh2nfD3b+Am2y","tlshash":"8781613a08b4cc199362612ecfebb105ab31009b56064d6439cd699cefc1b7c84d7bad","first_seen":"2026-02-03T20:06:39.455641Z","last_seen":"2026-02-03T20:06:39.455641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1781,"timings":{"blocked":810,"dns":509,"connect":152,"send":0,"wait":152,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/index.29ebc297.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:05.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /assets/index.29ebc297.js HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 06:41:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69770c7e-50e01a\"\r\nexpires: Wed, 04 Feb 2026 08:06:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5300250,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"939d7b401b520c7038863330706591ff","sha1":"9d824ad4d82521ec569d610377c7f183452e02da","sha256":"61c2c48d76b006a7300316638903bfade536ff0192c12e1279415c4f6fd534ed","sha512":"9bc9c5140a5ce47e3965344f24c15123e7763768c30ab20c41163acebba71f77a101aab4d82f06c9d39f16b1395d5fd118a9e61c737b192feba3306c4963cd20","ssdeep":"24576:jOkt7IFjPMn/iZQ4M4GFrykooiT3wQvU3UwSP05sm+SCR8GsRDNYYTKqIg:jOkt7IFjPMn/iZQJ4GFrykooiT3wMU35","tlshash":"47255c9471a5b42293fa48d9506b0005b23d2b5cb40894f0f1bdddb93a7ac54a2bffbd","first_seen":"2026-02-03T20:06:39.465835Z","last_seen":"2026-02-03T20:06:39.465835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/GBPUSD.jfif","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /GBPUSD.jfif HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3112\r\nConnection: keep-alive\r\nx-oss-request-id: 6982553368F5793833CE7EB7\r\nAccept-Ranges: bytes\r\nETag: \"843D07EAAB851BDEC4ED3D144F35F33A\"\r\nLast-Modified: Mon, 13 Jan 2025 06:16:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6453509990731668063\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hD0H6quFG97E7T0UTzXzOg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"843d07eaab851bdec4ed3d144f35f33a","sha1":"35bf1e6a8bbe10a5e416884698b86384202bdb91","sha256":"305eb71263b402ff611596f6239bdf1599029ff35e9e9f8c6ec1411f9d3940ca","sha512":"aac68674fc307a73f0791b6d64672f564673fae3479f1998f472efc1affa29d40af4afe92a33832e4a21af4ebaf9f247dd920e5655acce91b86c1571ed2a3bf6","ssdeep":"","tlshash":"49515d724b3809590d32e0e12129e7274c1379aeef8fae60dd9bde7c58a463d6870f45","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-04-06T13:18:05.314793Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2302,"timings":{"blocked":2002,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getCoinList","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:07.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://pc.exodusix.com/\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":2339,"timings":{"blocked":1043,"dns":528,"connect":252,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.exodusix.com/ws/9a9f6cbf-e512-468c-9fcf-84cff1324353","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:08.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"GET /ws/9a9f6cbf-e512-468c-9fcf-84cff1324353 HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://pc.exodusix.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: kGgSYlB8M/bbtU0geToxpw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Tue, 03 Feb 2026 20:06:09 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://pc.exodusix.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: SZ/6a7Ufq4pZpBq+WJ0WtPlJIVA=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":2383,"timings":{"blocked":0,"dns":795,"connect":1057,"send":0,"wait":263,"receive":0,"ssl":1062},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/index.3224b3d7.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:08.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /assets/index.3224b3d7.js HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/assets/index.29ebc297.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 06:43:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69770cf8-6b2c\"\r\nexpires: Wed, 04 Feb 2026 08:06:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27436,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27435)","md5":"419c8ccd9b1c34fd69f05b1db39893ee","sha1":"78a0b9debf2c6c996807f3c8d8b90ff015de39da","sha256":"5edd42d2a4fa0f6d45513fbbc935b7c780df6a904e5a8919a2f9c297f1ad097c","sha512":"af1495f379100798f8967444b7bdc01def2bf7b38b07c58eb2c21d425a43f1d7bcc74849c018a5aea625cba0ba52ea7db4cdb30d172fc66cf4b04d63a63da708","ssdeep":"768:+hPgUT+OS1wdB+8ro6k7y1khsjNc5nnIBVzJD0DdYBer1E:p60F2","tlshash":"89c261adf51e8a78f1f79851141c04463a4cbfd381508653b6fc3e15aba2ebc278d72a","first_seen":"2026-02-03T20:06:39.434154Z","last_seen":"2026-02-03T20:06:39.434154Z","times_seen":1,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0ab31fa56397d4c4e9de242d79130be65.jpg","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0ab31fa56397d4c4e9de242d79130be65.jpg HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 945\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533AFAD5B3334058258\r\nAccept-Ranges: bytes\r\nETag: \"B2CC0B6A2B928A3D0785DDBAD58E7EB4\"\r\nLast-Modified: Thu, 02 Jan 2025 03:53:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7139311599118660718\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: sswLaiuSij0Hhd261Y5+tA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"b2cc0b6a2b928a3d0785ddbad58e7eb4","sha1":"81ab8459ae5281d4a091e60bfef3b9153535f37f","sha256":"b7209baf258b008d38d11f6d10d47bdee856a1e6456c879a49305ea97d1a5bce","sha512":"231e5ab8dbb2f6305c9fcd265f3d442575d639479baca27e91014677d3f0c0d7dcf3f238e607767a03cfcd5689bc0e81cb3d0f7821bc1367a20cade8306be7cd","ssdeep":"","tlshash":"a611c8ef80eb9471a962bd6ecc1a084edf7124de0210726009431d21276e52d5154605","first_seen":"2025-05-29T23:41:24.345145Z","last_seen":"2026-04-06T13:18:05.355543Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2070,"timings":{"blocked":1772,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.01a2d4131d79e4accadef7ce632b52107.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.01a2d4131d79e4accadef7ce632b52107.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7482\r\nConnection: keep-alive\r\nx-oss-request-id: 69825532AB4B81383207A07E\r\nAccept-Ranges: bytes\r\nETag: \"9E3AEF575A52B47CCC4D1AC7BC3A8528\"\r\nLast-Modified: Sun, 16 Feb 2025 15:05:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15317690817716188028\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: njrvV1pStHzMTRrHvDqFKA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced","md5":"9e3aef575a52b47ccc4d1ac7bc3a8528","sha1":"e5145f65d372e2b49870982a939222a312372039","sha256":"e90840efacabd095c8b2dcd528980af1aace4924d9fde2a1ce8f0a52701aca9d","sha512":"d22f068a3adda10d505f757935d8edc0536cbb700c3495a61215938e8bf5d42cf1142abdf8e5dc91e17df5796652a617a919b8aeade660b8de2ad4955e8a24df","ssdeep":"192:NWmlO+6n59gcKv+pmk4ahPfadPHd6VsgFC1LnS:Nj7c59gcg+oihPwdSs7S","tlshash":"05f1bf473bd66060f1c650a93b2c46ba869fe964307a084dcf6d2855205f7457ef8c8f","first_seen":"2025-09-25T02:41:04.508145Z","last_seen":"2026-02-03T21:08:54.85237Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1393,"timings":{"blocked":1125,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getMt5Amount?coin=xagsgd","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xagsgd HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nContent-Length: 6\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"xagsgd"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f3941a9f99799c880f1e6cfe54cb0a22","sha1":"804127970ad2924972f2d50313baedbc2cd8a8a1","sha256":"2693e3f4c8ff5ac4a4437947efa078815608d4eeb361ac0ea85e493d050c5681","sha512":"0fd03ec796a6dbfb4f37b1a1f9621eecd89d70d16ab56a16c81157b5172edc083ff6dd47321a28ab0e5de144022a442970bbf977b63ad50e5b627ee7e39b9e96","ssdeep":"","tlshash":"f49002652c1cd242e8c304a995065204012431a0662493484c5a913580885722450958","first_seen":"2026-02-03T20:06:39.475883Z","last_seen":"2026-02-03T20:06:39.475883Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0502e5d9bd5e04ca687b68d220e37ade3.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0502e5d9bd5e04ca687b68d220e37ade3.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6239\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533ACF6C532367E290D\r\nAccept-Ranges: bytes\r\nETag: \"0D81DEA3D5136412D5559DA2B49EFA25\"\r\nLast-Modified: Sun, 16 Feb 2025 15:07:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12280039315546196716\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: DYHeo9UTZBLVVZ2itJ76JQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"0d81dea3d5136412d5559da2b49efa25","sha1":"511bf6a37fe981652e4e4c3133c633ab9f993052","sha256":"8409d2f758c5512b41e6fe3fad622ac8913b2549b0e1c22c271fa0b669dc6b8a","sha512":"664963292e5963e7ce2e22bde6a3e3b36c24f1e6445f8a45907061b59f59af6de19d7e545a47f1583b7c47c43fa74600df8a1a6af8d30e6fa7cc6217bc37cda6","ssdeep":"192:Zb/GGvqgnBcdnQr6bYFIiZG0RDPuT3GwAwyJFbY:kGvq+SQr6bYFIiRyT2wAwy3bY","tlshash":"48d18dfab108055a502f4c987cf8a6256b75dd365372eb9bd076983f2a763cb7108c02","first_seen":"2025-09-25T02:41:04.525538Z","last_seen":"2026-02-03T21:08:54.808111Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1736,"timings":{"blocked":1221,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0fb16dc430d104b16b644fc12f674e98c.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0fb16dc430d104b16b644fc12f674e98c.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 404\r\nConnection: keep-alive\r\nx-oss-request-id: 6982553393A7E9313229BE09\r\nAccept-Ranges: bytes\r\nETag: \"5E22A9302A4383454BFE530F0DDFFB53\"\r\nLast-Modified: Sun, 16 Feb 2025 15:08:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18276743004581408811\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XiKpMCpDg0VL/lMPDd/7Uw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-06T05:29:05.030411Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":1727,"timings":{"blocked":1403,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.020a0931045f1401a8c24339e2d7c388c.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.020a0931045f1401a8c24339e2d7c388c.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18561\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533AFAD5B3334C58158\r\nAccept-Ranges: bytes\r\nETag: \"7A5833011D56DDA5E150574C907EE124\"\r\nLast-Modified: Sun, 16 Feb 2025 15:06:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1941544493996527567\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: elgzAR1W3aXhUFdMkH7hJA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":18561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"7a5833011d56dda5e150574c907ee124","sha1":"63572f8359dcd46a1caa372ebb37c826b224fb2a","sha256":"acc2cf38b19f6aea203ee1229e38419763765188414f69d15cc02fec03d30925","sha512":"cbbed84be47144fddab4e7dbff099164c1360d358d5f3f7e100d654c49d3feec0adf8cbde4c8a6c995f3f85f23bea599810704fc1518ee7d73717278bba64362","ssdeep":"384:I/GPo/pSVwBsWflZ5UWGAeNg2UfyhvvKxqwAOaMK+Eg:CDUaBsW9XUWXeI6hK1WwEg","tlshash":"1782e0a3fdc65a23d8d59d8f27bc073a0ef0810c65a5e0c3a66a743c58f6d760c5a19b","first_seen":"2025-09-25T02:41:04.46671Z","last_seen":"2026-02-03T21:08:54.866113Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1736,"timings":{"blocked":1432,"dns":0,"connect":0,"send":0,"wait":303,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/en.7a364be2.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /assets/en.7a364be2.js HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/assets/index.29ebc297.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Aug 2024 10:41:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b5f248-d7ce\"\r\nexpires: Wed, 04 Feb 2026 08:06:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55246,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (55245)","md5":"83402ecde13d2415a922eb1448617cdc","sha1":"b3c583462368b87a426a5fed7025b923726ddfde","sha256":"d3b258a01a6d267dc7a056c2fae3b0b0499c0ec6601a5f3c5752c8b16eeee51a","sha512":"a23f11da43b96ed86d9aa9252fea6865ce409d8e15d9971b422425d6d3555d8fc494a79f22ecd23a7dc3056e3797c1fce2ba1bfd96db6653b1a9139746e20d69","ssdeep":"768:U9tZcEw/od6rUOdAFsifnAcC2rAaAMFZoP6+6sPnhmDLrAIo7hspmwO6fpk7aOjD:hposUOdebw2rdFZjsPhHsujyWXjC8F","tlshash":"d643298e7e0a94aa09f3937679ce1f5020fa05c18265841f4bfcc5fc53e2b5a6367728","first_seen":"2026-02-03T20:06:39.483826Z","last_seen":"2026-02-03T20:06:39.483826Z","times_seen":1,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0344b72ce934543e486d4c804d820fcf1.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0344b72ce934543e486d4c804d820fcf1.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2751\r\nConnection: keep-alive\r\nx-oss-request-id: 69825532AB4B813832DB9F7E\r\nAccept-Ranges: bytes\r\nETag: \"376854ACEE0906999BAAAD124AAEFDAB\"\r\nLast-Modified: Thu, 02 Jan 2025 04:06:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9227737499440654812\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: N2hUrO4JBpmbqq0SSq79qw==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced","md5":"376854acee0906999baaad124aaefdab","sha1":"390b6afebb81ce606dd17b2d1e31344974e03a79","sha256":"a8aea1aa54666f903372c7314fcf209e9dfec9c2e60835b7f0807d11a1d88ee9","sha512":"d27839f955b708d8d5eb19d6f317850bfcd294dac80491ae3689decc96cb393560e0cdab748c90b8b03b2ca30019fea52efddf7f33828336821dc8987e15c05f","ssdeep":"","tlshash":"1b514b2749630c1dbd5e57e70e8435bba9ab34dbe97d903b093a3a07ad0f04b29a4254","first_seen":"2025-09-25T02:41:04.489463Z","last_seen":"2026-02-03T21:08:54.860353Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1907,"timings":{"blocked":820,"dns":27,"connect":262,"send":0,"wait":267,"receive":0,"ssl":528},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/CommonMethod.8eedd4a3.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:08.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /assets/CommonMethod.8eedd4a3.js HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/assets/index.3224b3d7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 871\r\nlast-modified: Sat, 20 Apr 2024 07:06:50 GMT\r\netag: \"6623698a-367\"\r\nexpires: Wed, 04 Feb 2026 08:06:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (870)","md5":"bed6f735ee3eeebb47b4d8938a275fa3","sha1":"77440fd7e87c279f79e1421cc2138f79a5e94973","sha256":"1f55b9f50d93897c73f7e850794e523e52d16f9034118c4b969229a65c4a19d1","sha512":"2949028a739149ccb599fe862771e0f48516fcacd7f754268f2d651956529a35c3febae718841b396ff465c8916fee3bc2dc752c8f56efd31c9ef034c63af125","ssdeep":"","tlshash":"4a11ccd0e48dfb290368dba5a2248033f25d58b51e288368c0f95eb57b2d449b79ea30","first_seen":"2025-06-07T20:38:42.155028Z","last_seen":"2026-04-10T15:03:13.149543Z","times_seen":7,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/vite.svg","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:08.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:08 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 20 Apr 2024 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6623698c-5d9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e3a10e157f75ada21ab742c022d5430","sha1":"f7f39d7237b791a945d52a5cd7a8fb365f313366","sha256":"4a748afd443918bb16591c834c401dae33e87861ab5dbad0811c3a3b4a9214fb","sha512":"fbf065e26d907454cb432a17d831f448e1c3df0f33cd681ccc52b63e5bc26bc9e4de08591a2de579e5b05219fcffd3b4d4261ada6fa55299e731343df860488d","ssdeep":"","tlshash":"2031451fda7fd4fec0a6cb48e612b047962c30d95e41c5b4d9845f0e64a19f17c0aa64","first_seen":"2023-05-18T16:20:30Z","last_seen":"2026-08-07T18:22:28.74012Z","times_seen":6361,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/resource/images/common/home/bannerimg.png","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /resource/images/common/home/bannerimg.png HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6623698c-2196f\"\r\nexpires: Thu, 05 Mar 2026 20:06:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1096 x 982, 8-bit colormap, non-interlaced","md5":"81bde0f76b8d8c587f93c31ca0118911","sha1":"d7696679f1f1278787cc6242af6a2e9a9af49ccd","sha256":"b3c59f9007ae88ab2eb802cf5b2f48e0c8fd71d96e02182af7975cf0ef29350d","sha512":"c7958c6ace2b3db1cea047c4373ff2722b43da16fc7993f748dc87d6f4ddfe0946f36c7cadd76ab9e25e7e4b316636d4a208dbb1f2623ead1441676336ca890f","ssdeep":"3072:o8xzSTATdbv2PiNXSQy48F60fv1h089EECVPYTUlki5rWx6M6vD:n8ATdD1SQy48gOv1hDCmUlFAx6MED","tlshash":"46d312d39adb5b94ce0788707341af093dae6a21fdea24514089da0f55ae3b48dc093f","first_seen":"2024-08-19T17:34:46.604947Z","last_seen":"2026-07-28T19:29:08.868379Z","times_seen":149,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getMt5Amount?coin=xageur","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xageur HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://pc.exodusix.com/\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/AUDJPY.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /AUDJPY.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:12 GMT\r\nContent-Type: image/png\r\nContent-Length: 2537\r\nConnection: keep-alive\r\nx-oss-request-id: 6982553493A7E93132C0BE09\r\nAccept-Ranges: bytes\r\nETag: \"E6BB45FD217B85F8DDB87CDA6774756C\"\r\nLast-Modified: Mon, 13 Jan 2025 07:02:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10487197121598168646\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 5rtF/SF7hfjduHzaZ3R1bA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"e6bb45fd217b85f8ddb87cda6774756c","sha1":"21e41e468b3cffc2d7cd7245eccfcb7a6fb96389","sha256":"cedcaaf13ac8df63d9dcfde5f0c0da192f49d7001b5d35b381133ffba90e8985","sha512":"2c6de6fe82e2475b061f687114b022912dc08fff178f19f3b44e17a1766a629fd89bb016a4cb534108b8dde60475dcc505f494c1fa0681e953ba43d395589ece","ssdeep":"","tlshash":"d5515ddfa2fe232b7fb1805723937364d36752450680e8f96d90e66644c45740338dc3","first_seen":"2026-02-03T20:06:39.487893Z","last_seen":"2026-02-03T20:06:39.487893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2592,"timings":{"blocked":2238,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/resource/images/common/home/Selection-a.png","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /resource/images/common/home/Selection-a.png HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6623698c-fbe\"\r\nexpires: Thu, 05 Mar 2026 20:06:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"d41eddbe11398decb778d09c35fe7c34","sha1":"5f81f58df40d09a3b8cfe3707ad3fd451c7e6859","sha256":"381aa09f34edb9c8ff2d3fb0ff09af42260fefc41c48a8e03ab14a9f2cd849a1","sha512":"e8da5839ebe24ef89aa2c7c15968a4a589303a2303329f20f44f360b62de3182cd0a431811297da1279d76cd2ec0c05da4ed13e1b587e35ba75a7f6cb3de30b2","ssdeep":"","tlshash":"b081807b352c750dcd2510742761408dc27229301ddb1079aeca6d42bd7297577603bf","first_seen":"2024-08-19T17:34:46.654099Z","last_seen":"2026-07-23T14:03:04.09666Z","times_seen":123,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/resource/fonts/PINGFANG-SC-HEAVY.ttf","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:10.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /resource/fonts/PINGFANG-SC-HEAVY.ttf HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/assets/index.1f16077c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11114788\r\nlast-modified: Sat, 20 Apr 2024 07:06:52 GMT\r\netag: \"6623698c-a99924\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11114788,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", name offset 0xa256ec","md5":"c11d4835ea9813d0e654d4c375257421","sha1":"44bdbe2b862dd5f236417788db8b286ebb2265af","sha256":"61a3b6d3ef3960a85ea310f8667b8615da678e9edea8b5036c8d9a09aea7169c","sha512":"1fe75b597c55aa2319b1d0efb5b02e4fd4b4e8a4772cf321100658f80957481254e68756b2e90f2cc7bdc0f585043659a10af097d18995037bd4e59917c18938","ssdeep":"24576:BkgBFPX1+oxFnjOPwVgsVDQezA7FEWXS5ltkCbudYqrj2wn0:BkkZC1q","tlshash":"07256dd3c7c87d299a21fd3c2510f66bf48e50088a25d2f9cf672f3618569744ea8eb1","first_seen":"2025-07-29T21:26:30.325138Z","last_seen":"2026-07-28T19:29:08.847456Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1341,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":1188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/resource/fonts/PINGFANG-SC-BOLD.ttf","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:10.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /resource/fonts/PINGFANG-SC-BOLD.ttf HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/assets/index.1f16077c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11139412\r\nlast-modified: Sat, 20 Apr 2024 07:06:52 GMT\r\netag: \"6623698c-a9f954\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11139412,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", name offset 0xa2b728","md5":"a5f40309207afeb657ed9436536d0d0c","sha1":"e08b67e9d2d1836268cdc905d4a7bc8aaf46d583","sha256":"b03430452ce3669613d60acaf8d799052aa1fdc03012feb481b5a27fe8a89fb8","sha512":"2a5d9eaeec304955d870d9e68b8efeb3a9ed268b1922a8750cc2fbc79b1eafbfde68f74b6dbddaae97950f0f722790d6a24ccda0c5e28ec0f5a7d252f9fd68f3","ssdeep":"24576:Jk3368WWqmO8+RYKjcpbR8z0AuxRbTn1tET64wBQFFlUqIY7NMIbvW:Jk336M5BI1E","tlshash":"36256d93c7c47d2d9b22fe3c6410f26ff48e5409892ad2f9cf632f36185656449a8eb1","first_seen":"2025-07-29T21:26:30.322215Z","last_seen":"2026-07-28T19:29:08.83963Z","times_seen":66,"resource_available":false,"data":null}},"time_used":2258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":615,"receive":1643,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:10.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://pc.exodusix.com/\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:10 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/platform/Exodus/config.js?1770149167837","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:07.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /platform/Exodus/config.js?1770149167837 HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:07 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-07T19:15:37.881733Z","times_seen":547189,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/NZDUSD.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /NZDUSD.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 2950\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533794D103134C6D1F6\r\nAccept-Ranges: bytes\r\nETag: \"D89A53F2025B935CCEEE7E5B0EC5520D\"\r\nLast-Modified: Mon, 13 Jan 2025 07:02:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17054332065645746101\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2JpT8gJbk1zO7n5bDsVSDQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2950,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"d89a53f2025b935cceee7e5b0ec5520d","sha1":"057c5458fc429bc71ba7bb2f0b8e067f9c1f09ca","sha256":"a90aff6e7d4220096f4efbe72d9e21846b5818018104d7b38d60b37437dd1f28","sha512":"ac1d64b6bfd495a3996cead539947c35c6bcb5a3cd8f31a00b8b2835c11c74af5ee4a05e1a19be445260d97033caaaee4b29f79929c5c2c672940af09c4ebb30","ssdeep":"","tlshash":"97516ea4fdd16972f754a0d0511cfe2874d202c30a445727e6de741b31e2b4667dcf1a","first_seen":"2026-02-03T20:06:39.492452Z","last_seen":"2026-02-03T20:06:39.492452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2307,"timings":{"blocked":2004,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/index.1f16077c.css","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:05.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /assets/index.1f16077c.css HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Aug 2024 04:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b598be-84be5\"\r\nexpires: Wed, 04 Feb 2026 08:06:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":543717,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ec2a55df443a960699977c0bb2b0a87f","sha1":"c27e168af3440639219e5a9cfa90d9c47a1f20ba","sha256":"1f16077c6c7838995e994f9962919682116f31c1631266635a3d8a75bdfa0de3","sha512":"596c74d4fadc7fd6fd9031419b7e9f128b41581d3823fa0eae947e0f71f8df1954eeea19e670180691f0b0b2db62ae809f784bfa29eb4dc3c76f3b9ee39bfce9","ssdeep":"6144:UbtitXT+XK4PjDEDSHmWuwK04MuobXSNA/mylsaFiAFWQ:yDEVyhBFd","tlshash":"24c4c655e753513b2e17f63d7bc5e9c8bb28ea51dd12cba5f240a00885c3af502a3d2b","first_seen":"2025-06-07T20:38:42.176515Z","last_seen":"2026-05-04T13:27:14.824535Z","times_seen":3,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/resource/fonts/DINOT-Regular.ttf","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:06.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/assets/index.1f16077c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12381068\r\nlast-modified: Sat, 20 Apr 2024 07:06:50 GMT\r\netag: \"6623698a-bceb8c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12381068,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"BASE\", name offset 0xa88e6c","md5":"8c1c07fe2997321d54b049da39e880fa","sha1":"e85c69e54574d47b1a3b665a5f7c98ffeafcd371","sha256":"c6b6dd24e24ea6c07767f20fc1b2dfe86f31b1ca166ae620079c67dcdd5add6d","sha512":"192427288363eb352a702f85cbf2d714a78374d4583da9be541fdbcbbaf4e643103ded1b942d601838476029b05eb5b84d8b08998b546046255fa29670bf1127","ssdeep":"24576:H/8MftuDPIz9ZeJ199QETruMGR7JrhCannDH3l8cVZYIVY0:EituDduVjn7Zf","tlshash":"94257bc297c92d1eea22bd3c2440f63e70ce65088a56d6fade431f3718429741de9eb5","first_seen":"2025-07-29T21:26:30.315596Z","last_seen":"2026-07-28T19:29:08.845288Z","times_seen":86,"resource_available":false,"data":null}},"time_used":2003,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":1768,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getMt5Amount?coin=xaueur","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xaueur HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nContent-Length: 6\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"xaueur"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8a8bf848f478e2745aad3aa143675f00","sha1":"6156f3c95bca0199beee840fb44603395533ed06","sha256":"9c2bd2129700111c40a1f2427f7518aa735170f3fa38ce583b2ffd04deacee61","sha512":"d75b4aae53b6c66a4b28994b756a0868caa3f7e4981444a3c5a9d0b26369a4c8553c47b5535c22d02e578862855aa3e08964514c0ce70a2a95febecce6800a18","ssdeep":"","tlshash":"fd9002551c1c8242a88300b99517220400243560672492894c595129808c1722080858","first_seen":"2026-02-03T20:06:39.495742Z","last_seen":"2026-02-03T20:06:39.495742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getAllSetting","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:07.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://pc.exodusix.com/\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":2342,"timings":{"blocked":1043,"dns":529,"connect":255,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/index.7cfffdce.css","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:07.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /assets/index.7cfffdce.css HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 07:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6623698a-36af\"\r\nexpires: Wed, 04 Feb 2026 08:06:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13999,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13998)","md5":"5cca1c1f4f5defc4049d05ffd25f1d72","sha1":"db3cd5816a4048633c122aa3a1db39ed2c3eef53","sha256":"7cfffdce4ee3ba4f16f06b248469aea9b054f445aed558ec47e64c2c267369c6","sha512":"140bfa81d1cf255b331b2c9cb9ebb7d56610c015c862c62489b8d676243544b76ab7ee2e96bc0135d13be4f870a2a5900d695939536af903e9b53d317d0c9f34","ssdeep":"192:91YQOXMuhTEwtEoF8rRMbNThu1vwbW62lGvWlXaYZdzgDIsCQo:9yMuhTEIxF+RMxCQCD","tlshash":"8e527554b29da5367837e4092da89b4e7041ff5384036399eccaa97ecdc79b32738750","first_seen":"2026-02-03T20:06:39.496657Z","last_seen":"2026-05-04T13:27:14.838955Z","times_seen":7,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/core.esm.6acae16e.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:07.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /assets/core.esm.6acae16e.js HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pc.exodusix.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Apr 2024 07:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6623698a-9e43\"\r\nexpires: Wed, 04 Feb 2026 08:06:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39692)","md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-07-23T14:03:04.079671Z","times_seen":108,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/assets/core.esm.6acae16e.js","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:08.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /assets/core.esm.6acae16e.js HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/assets/index.3224b3d7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Apr 2024 07:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6623698a-9e43\"\r\nexpires: Wed, 04 Feb 2026 08:06:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39692)","md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-07-23T14:03:04.079671Z","times_seen":108,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.047c1443891764f79b795157e461c655f.jpg","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.047c1443891764f79b795157e461c655f.jpg HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1522\r\nConnection: keep-alive\r\nx-oss-request-id: 69825532794D103134FCD0F6\r\nAccept-Ranges: bytes\r\nETag: \"745AF06268B3B824AFB370ED21548403\"\r\nLast-Modified: Thu, 02 Jan 2025 03:53:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4938955846271090707\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dFrwYmizuCSvs3DtIVSEAw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1522,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"745af06268b3b824afb370ed21548403","sha1":"b34430638a6119980b082148e1f11290579e4e17","sha256":"1c374f14610f14efb98ea056ee0fcde364fca7e37892cfd493111580abb564c6","sha512":"1e42181e0aa4c0a975cb737a2f7114e9a7ef5f2a176eea48f5d9913efb865593b3bed35d22f733008173ecf7e3b2b0d6e82d7aee70ddf966d6c1736566855c48","ssdeep":"","tlshash":"9131d7fb9d4893ef84fb1f60179b0924d856529c1d212528459d5d33bf92c29cc1e902","first_seen":"2025-05-29T23:41:24.314069Z","last_seen":"2026-04-06T13:18:05.320733Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2115,"timings":{"blocked":905,"dns":10,"connect":298,"send":0,"wait":303,"receive":0,"ssl":597},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0991f20fc10354bebab15ffc9f21147cb.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0991f20fc10354bebab15ffc9f21147cb.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1900\r\nConnection: keep-alive\r\nx-oss-request-id: 69825532ACF6C5323645290D\r\nAccept-Ranges: bytes\r\nETag: \"16314D258DFE13AF5224604FA56493F1\"\r\nLast-Modified: Thu, 05 Jun 2025 14:49:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11877532797283854207\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: FjFNJY3+E69SJGBPpWST8Q==\r\nx-oss-server-time: 12\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1900,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"16314d258dfe13af5224604fa56493f1","sha1":"9a85b270b81a16b8545fffafb4a9d861daec4ba7","sha256":"89c933339cddfc08de5f20b92279915f39d442839754dedfb10f25cf537cec3a","sha512":"b7a8e571263ec971bd9d39897cc5b6dfb9df6c98c8e5ac984eb0cf71304ff7e8e521bb46dec9b0963d6ec04ed0e55c5271a2a8abf5e8a224cf0cd5e833930b31","ssdeep":"","tlshash":"3341d7c3b315a464cfd1c29683f69584ad6286c183b2710e8563ea85829eb1dba40bc1","first_seen":"2026-02-03T20:06:39.501404Z","last_seen":"2026-02-03T20:06:39.501404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1248,"timings":{"blocked":-1,"dns":8,"connect":305,"send":0,"wait":319,"receive":1,"ssl":615},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0fd05c3a173f3402496b50ca2a3c1e6dd.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0fd05c3a173f3402496b50ca2a3c1e6dd.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6941\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533AFAD5B3334968158\r\nAccept-Ranges: bytes\r\nETag: \"29BDD1B8FDBBC955DF20ECEACAA8B1A6\"\r\nLast-Modified: Sun, 16 Feb 2025 15:07:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12417224711459052637\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Kb3RuP27yVXfIOzqyqixpg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6941,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"29bdd1b8fdbbc955df20eceacaa8b1a6","sha1":"9742dd42d6a0b09b73ec9df8faa412aed8ee2394","sha256":"dd049d28fd24a3d5171493db2faa122f95b7025467788efe337a54f589c96834","sha512":"9a918cb4e7fb35a09b2d82d48dca22a3ee55715ba723f37297acbe6dd6fa729c36031d730b9744e19223058dc8633ea674357feea434aafe5b8ca042ba029a5f","ssdeep":"192:pfbDq9qEbD0woDOd/xeCsv9FoCnInAKoy/FCu9IdU:hOUID6DOlxfSpniAKoy/doU","tlshash":"9be19e8ce3366c18775f78bd91acad20dd67966a46c8036a8d0c95905b8f0f078935fe","first_seen":"2025-09-25T02:41:04.443687Z","last_seen":"2026-02-03T21:08:54.85305Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1449,"timings":{"blocked":1160,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/resource/images/common/home/Selection-b.png","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /resource/images/common/home/Selection-b.png HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6623698c-1ad1\"\r\nexpires: Thu, 05 Mar 2026 20:06:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6865,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"780fc0bba0436d2e007810a0ab31b50e","sha1":"a8aeac9b0b51d65393aaea9dbeacd6c281cfcc64","sha256":"4bd0177dc9f6cfbfab5d3df02ec5bb397b1410cdaaaea2dab787e54e30a3ff3c","sha512":"98a4061779796f16b22fb27dbab9fbd2e1c13ea3aac362e9db0f1062f2f5292f568ff1eaab9ac49528922ec842c35fa16e0a80a8bd4edef1f41b5c613290f926","ssdeep":"192:IjMvFrdgXf5H6fSoOOgZPAsps7URrsphkuD5HFlJiCCF0Soa:IIvxdgXfwoBaU1sbbD5HFlJaFCa","tlshash":"1be18dc00a1d9e9aa83f7cb5089606a24790752b62d66aa65dda86ea30f9c34244c397","first_seen":"2024-08-19T17:34:46.61216Z","last_seen":"2026-07-23T14:03:04.068974Z","times_seen":125,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.06f2edfcaa3524005b63aad9059e52ffd.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.06f2edfcaa3524005b63aad9059e52ffd.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 690\r\nConnection: keep-alive\r\nx-oss-request-id: 6982553393A7E931325ABE09\r\nAccept-Ranges: bytes\r\nETag: \"4DCAE47B7D96F2FBB2D801DFD47B5C1E\"\r\nLast-Modified: Sun, 16 Feb 2025 15:07:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13809590032253971790\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Tcrke32W8vuy2AHf1HtcHg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"4dcae47b7d96f2fbb2d801dfd47b5c1e","sha1":"29a20b523a063b8043f3b6e760496c8328c26e93","sha256":"695bf855827cc465acc27a004c5066ef17468d51d3afac72e8b6fd0a80b594cb","sha512":"79aa8c8acbaf7aa42b5cfb8e7ce99b7d21903e9c90fadcdd847ec80e16f9531a5c44446f5febc937053d13ba4a0dc6ada737ec0b229d8ece9346f6009c28c5cf","ssdeep":"","tlshash":"960144adc154a8b4f10e55216c9045c15931fee82888451e4564e5183396a10f6cf2df","first_seen":"2024-11-06T16:41:01.114719Z","last_seen":"2026-07-28T19:31:07.619123Z","times_seen":104,"resource_available":false,"data":null}},"time_used":1976,"timings":{"blocked":1703,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getCoinList","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27643,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f309eba3ea374d4cd520dfd29fb5aa24","sha1":"fa309c599701b99c1c8b839d743bc8c2a6b8b801","sha256":"8857b8f05448bc365c7a45d0685a384a0ce340d4e91d226749b923c566d12a70","sha512":"5337e41157d1a6f18b45308b532953c5d023c4849580bee848bbe3d62a163c30cd90f445da6021214ebefd16f3008a4e58c0687677b4d71f608151a3f44980b4","ssdeep":"192:ZIXsi6XlbXG0XGKWXY0IyXysSXmv0XRFIXYbX56XFrugePXeQSzguFTDrwXbG8Qb:40SMbaqgD","tlshash":"69c26552612895bdc5ba80d12ebf7d1750cc317fadc58e1ad6ca8d8c8ad8eb1150bf07","first_seen":"2026-02-03T20:06:39.510796Z","last_seen":"2026-02-03T20:06:39.510796Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getMt5Amount?coin=xausgd","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xausgd HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://pc.exodusix.com/\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0e9742b3afeaf452cb1155ed28014d3ae.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0e9742b3afeaf452cb1155ed28014d3ae.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7473\r\nConnection: keep-alive\r\nx-oss-request-id: 6982553293A7E93132F0BD09\r\nAccept-Ranges: bytes\r\nETag: \"1DFFE1EEF25E441F86F1E9C18B328C4C\"\r\nLast-Modified: Sun, 16 Feb 2025 15:06:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14048302799536950192\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Hf/h7vJeRB+G8enBizKMTA==\r\nx-oss-server-time: 8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"1dffe1eef25e441f86f1e9c18b328c4c","sha1":"c9815c381bbc59eaa0c284c7f9de3fc65b52f22b","sha256":"b47d5c8f41642e04f8263d7a4eeaebc840b525595c86c44910d7a277a8303da0","sha512":"309b26b52f3a5fc767371fca8e8f18f03e73cac83d49321c416c898d4d174983027dd606ad004f4ba2b955fce69382d3bb291fdcef752ca3b8b61c8b84b4577a","ssdeep":"192:Gpc9dj8bUi2pWNXQUuE14yhssUd7s2OHQR7zo:0G/i2cNXQh64yhss6H2QR7c","tlshash":"fcf1bf538915983d054b7f3d24038c3fd77453d9739803cbf8e24aafac002b996e961a","first_seen":"2025-09-25T02:41:04.424965Z","last_seen":"2026-02-03T21:08:54.778568Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1420,"timings":{"blocked":1141,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/AXU.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /AXU.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 957\r\nConnection: keep-alive\r\nx-oss-request-id: 6982553368F5793833007EB7\r\nAccept-Ranges: bytes\r\nETag: \"4CF7FEBCDE802774E860280F72473B4C\"\r\nLast-Modified: Mon, 13 Jan 2025 07:02:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15843907226721346241\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TPf+vN6AJ3ToYCgPckc7TA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"4cf7febcde802774e860280f72473b4c","sha1":"349c9060813d3c6cd535d6d8e7469adebf51f03a","sha256":"6ba1d900f5edeb32b50a7f5ca28347bc3fd7495a2032ff4d9c9b6a518a609f3c","sha512":"f10fe7221a8ff89eac50b17244fce40b9c07963db44ba1a8a5b6fe0c47dcb6fe1abd474fd8a2cd559e0b6da74d231bd161254e4ebf8227a8b74b3a0915cf7ac8","ssdeep":"","tlshash":"a41150ea1108aa13c4850e602aa261585cbf81f976e7942f3bf68495da3a16c210927f","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-07-28T19:29:08.854645Z","times_seen":167,"resource_available":false,"data":null}},"time_used":1738,"timings":{"blocked":1184,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.03ab49bbfc1f84636be4717a8cec04d80.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.03ab49bbfc1f84636be4717a8cec04d80.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1249\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533ACF6C53236F3290D\r\nAccept-Ranges: bytes\r\nETag: \"999AF71FF23CA45EA6B7DC796DFC8234\"\r\nLast-Modified: Sun, 16 Feb 2025 15:06:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12138935969898064533\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mZr3H/I8pF6mt9x5bfyCNA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 4-bit colormap, non-interlaced","md5":"999af71ff23ca45ea6b7dc796dfc8234","sha1":"cde0e47605ade9c170091e87687c1caf0f004b0d","sha256":"8c3fa8859c37cc98d6d39f27758376c94742172912d1d631b383398795b59353","sha512":"978c222a90af4bbe4666ba1f508d88841f1f0150c1b49ac87530fa3344a90aeaef44dce58b3d8c089c916c2435fff86ac8e123a6e08f162a22056a3f2541a63e","ssdeep":"","tlshash":"5521b7d781683011b1f9d83388b0a8c9f8398abbf639c8eb9d0884f93924f00032546e","first_seen":"2025-09-25T02:41:04.521619Z","last_seen":"2026-02-03T21:08:54.817973Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2029,"timings":{"blocked":1720,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getMt5Amount?coin=xageur","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xageur HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nContent-Length: 6\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"xageur"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d1dfba1278cbc2448a8a769676274e01","sha1":"fc125526ce26001e3ae784454f0b8a3a1bc4dacb","sha256":"6d097798946fa63980a7fc59144cf2f442e3829dd8ea95a1c86fc73c216c008b","sha512":"8a3f21348825c2afc099e5209f7e674b838e9fbe219dcde0e971f01ee20e07e05334d7c0f77297efe8681eca69660bd2ad84f45ddcdce12ad0e3a2d4aebdd4ae","ssdeep":"","tlshash":"d99002651c1c8242a98301a59616120401353160662493494d59912580881622550898","first_seen":"2026-02-03T20:06:39.515371Z","last_seen":"2026-02-03T20:06:39.515371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exodusix.com/resource/images/common/home/downloadimg.png?1770149169772","fqdn":"pc.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"184.72.1.207","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pc.exodusix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 05:24:07 GMT","end":"Sun, 26 Apr 2026 05:24:06 GMT"},"fingerprint":{"sha1":"06:35:45:EE:BC:8A:BD:E5:ED:4E:8F:A0:9A:EB:8B:B6:0E:D2:31:B0","sha256":"04:D3:E2:07:A2:B7:E1:84:63:86:B2:7A:2A:0E:09:CA:D0:D7:24:FA:1D:5A:F5:A5:51:8B:29:3E:D9:BF:38:34"}}},"request":{"raw":"GET /resource/images/common/home/downloadimg.png?1770149169772 HTTP/1.1\r\nHost: pc.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6623698c-22e9a\"\r\nexpires: Thu, 05 Mar 2026 20:06:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143002,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1368 x 972, 8-bit colormap, non-interlaced","md5":"4e59e1224e1c27738197d0b1c328c15c","sha1":"84f186b75c956ae9b5ff26b8d0e2b32ff0492e98","sha256":"1811704cad965db80f02ccca4a90b177600997e3c26128f4fd5a15e0dace500c","sha512":"7873a8c641cef1cc30fd926b9f99f558de23adca684a4c61c6d439b791a3e35a539d5c4da8970957d0fc1d1aea6a11939685779a41990f121c72a9426d085774","ssdeep":"3072:ruhlDWNa+r4srR2T+P9OkmGgv8uN2u7LM7xJNVewRLUhJJg8:hBrjAXEw5uJNVshJJT","tlshash":"6ed31283113a1650cdfefefb4a158f47861629b4c81ca35e5ebb29caa155f03f3a1603","first_seen":"2024-08-19T17:34:46.648366Z","last_seen":"2026-07-23T14:03:04.066532Z","times_seen":127,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"pc.exodusix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:10.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nContent-Length: 11\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"ROLL_NOTICE"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:10 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":574,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73f02ffabce96bb3e8195528486dcccb","sha1":"a5fb3ebe4474e27a82dfbed5138fde9c5d346814","sha256":"87df8c9083d670317c35323673ff66d28fa43ba00e4a66504e668bf5732ce26f","sha512":"a807ef380c0ad9a117f84da145efd993677b0db65177da5302e0364554bcfb4b8154211bb04969dd26146e7bcf38544ea5137942e34508cb5e184cad01627fed","ssdeep":"","tlshash":"55f08b1d583c9e79194584c320dcbcc8e65e1653c720cd3456aecf1d82f56ba1a2f945","first_seen":"2025-09-25T02:41:04.514889Z","last_seen":"2026-02-03T21:08:54.867624Z","times_seen":3,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.04a91378106a647ca90582e0cd3e55144.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.04a91378106a647ca90582e0cd3e55144.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6407\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533794D10313431D1F6\r\nAccept-Ranges: bytes\r\nETag: \"DA5DED4E012CE8B081B0E6D3317CEBF1\"\r\nLast-Modified: Sun, 16 Feb 2025 15:08:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15448227566258351033\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2l3tTgEs6LCBsObTMXzr8Q==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"da5ded4e012ce8b081b0e6d3317cebf1","sha1":"d7142077fc7c857b7ad954631bfb66e9c6281b4f","sha256":"4f9068d4588e7c9014fa5f16085e5623822852c11cd673f00cf23c2ce2e61f4f","sha512":"6687e11fbb96c1608520c102d28b40288c9cc66cead0b2991592abbf1850cbc658b63dad6c351062c2b4c1e9e29d2511575b8e560f3e37cb02210a287cdbabbf","ssdeep":"192:6h76SkV+++L3DDk/FF9aEBOGtDMmLlUvzfQUEEOn:6ht8Q/cdNCmLfrfn","tlshash":"8ad19fca0cda200a90cbbf4b5c6c29ea38e63c14312621d5dce05ee68c6b548d61df03","first_seen":"2025-09-25T02:41:04.484448Z","last_seen":"2026-02-03T21:08:54.872162Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1739,"timings":{"blocked":1185,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.01cbf64b4b3924e5d80a4903b9765a2db.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.01cbf64b4b3924e5d80a4903b9765a2db.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5395\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533794D10313498D1F6\r\nAccept-Ranges: bytes\r\nETag: \"0B598CBB042B0ACC20761EA92ABF0E75\"\r\nLast-Modified: Sun, 16 Feb 2025 15:08:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16466987238580561980\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: C1mMuwQrCswgdh6pKr8OdQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"0b598cbb042b0acc20761ea92abf0e75","sha1":"b1059831065a2a87fc88073e3296f9c601ab1adc","sha256":"07be600d97037cdfba92f18d2286564284a784e896380eebadebd50bf0e74c18","sha512":"f3b1fa468ac479e4be37b03b012ad50f5d4591c4019b671041f2dbade4e920d33c8c5fd033b80e0f82e12298dd3d91f2d756d2cfa42919f5abe8c553532aa7d5","ssdeep":"96:bcLpBJPpyMYDufiwmxhzYlo1Ki9qMkZII+7Pb83uVBfsL48kW1mlZ69NuDC:bctP4MYifiwmCsGZ+zS4k1mYwDC","tlshash":"84b17ddbdd2b5934bf31596ad2298c680318d06a483158b4970e8f7ccb91b3b3d432fa","first_seen":"2025-09-25T02:41:04.497566Z","last_seen":"2026-02-03T21:08:54.855599Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2027,"timings":{"blocked":1719,"dns":0,"connect":0,"send":0,"wait":307,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/GBPJPY.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /GBPJPY.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:12 GMT\r\nContent-Type: image/png\r\nContent-Length: 2522\r\nConnection: keep-alive\r\nx-oss-request-id: 69825534AB4B813832F9A07E\r\nAccept-Ranges: bytes\r\nETag: \"DB670A97E059087C2E1EE87DE6892F1F\"\r\nLast-Modified: Mon, 13 Jan 2025 07:02:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12629101231660111499\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 22cKl+BZCHwuHuh95okvHw==\r\nx-oss-server-time: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2522,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"db670a97e059087c2e1ee87de6892f1f","sha1":"18bcf0aff5955a55ea448e7eaaabb40689458def","sha256":"8ed4e03a2a2d706033b48a052febae6b7b57488ec9bf44d055d9f7da19c79f8c","sha512":"495bda9b8a554097ed3c00adb8b0fa8b24784674dab1d69adc52b2286e726bdf6f9bf31f958b94c0e487fe711e8f669b1089ad74d536940b68a9b3a432536b31","ssdeep":"","tlshash":"70512cd42593a1f4ce88761ae67282e1fd8a5f627616386086f031347eb77c451bba07","first_seen":"2026-02-03T20:06:39.522312Z","last_seen":"2026-02-03T20:06:39.522312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2591,"timings":{"blocked":2238,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.0132188a5ad254c5d9e9bc842e05f2f63.png","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.0132188a5ad254c5d9e9bc842e05f2f63.png HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6570\r\nConnection: keep-alive\r\nx-oss-request-id: 69825533AB4B81383246A07E\r\nAccept-Ranges: bytes\r\nETag: \"D768BAEBF9D530E8D90591CC57C2854A\"\r\nLast-Modified: Sun, 16 Feb 2025 15:05:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16497969511042301570\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 12i66/nVMOjZBZHMV8KFSg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6570,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced","md5":"d768baebf9d530e8d90591cc57c2854a","sha1":"d199a16d7c50db51c596d028aed4357759af845d","sha256":"f179d1aaa6ce9effe151c27ce7858a35864b19e3b343e1871da04d72d236d219","sha512":"a1e020195c3164f685cf81b1866822773c6c0e240a97e1332ac60357c48a296fe6dde66f4bf27a78249b1805fa171b4ba0dc1a84121859236653ce4562c1e40f","ssdeep":"192:oBtlntwKKnUCsW7K82/eSjjqYQmEeQ68pXZk:2Ta2ubojWuEd6eXO","tlshash":"6fd19de53994c5c389503b3306230abdf5b86ef0494791be05b6a73938180c2f7a2e6f","first_seen":"2025-09-25T02:41:04.452831Z","last_seen":"2026-02-03T21:08:54.836192Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1729,"timings":{"blocked":1375,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getMt5Amount?coin=xagsgd","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xagsgd HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://pc.exodusix.com/\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exodusix.com/api/common/getMt5Amount?coin=xaucnh","fqdn":"webapi.exodusix.com","domain":"exodusix.com","tld":"com"},"ip":{"addr":"8.216.34.239","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exodusix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 12:15:55 GMT","end":"Sat, 25 Apr 2026 12:15:54 GMT"},"fingerprint":{"sha1":"B8:39:D4:7B:E2:2B:9C:91:13:DC:CC:CB:83:6F:C6:C2:AC:CE:6E:A3","sha256":"DA:D7:E6:32:45:41:E5:C9:22:90:CE:E1:31:56:2D:7A:25:34:54:0C:87:8D:53:45:60:43:C9:D2:FD:BF:8C:0A"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xaucnh HTTP/1.1\r\nHost: webapi.exodusix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://pc.exodusix.com/\r\nOrigin: https://pc.exodusix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:06:09 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://pc.exodusix.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fa-echo.oss-cn-hongkong.aliyuncs.com/echo2.066c8931b4cc24a0ba341babd799bc6ca.jpg","fqdn":"fa-echo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.172","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exodusix.com/","date":"2026-02-03T20:06:09.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:02 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"8E:5A:D9:7E:96:5B:E7:CE:B6:66:30:13:9C:1A:2C:40:F9:26:A9:CA","sha256":"16:4E:38:8D:E4:EE:25:0B:07:19:86:C9:6C:22:53:69:1E:08:79:53:B8:41:08:8F:09:F2:4C:1C:57:11:26:32"}}},"request":{"raw":"GET /echo2.066c8931b4cc24a0ba341babd799bc6ca.jpg HTTP/1.1\r\nHost: fa-echo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exodusix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 03 Feb 2026 20:06:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1086\r\nConnection: keep-alive\r\nx-oss-request-id: 69825532AFAD5B3334658158\r\nAccept-Ranges: bytes\r\nETag: \"4315CA4480C0BC8BDA0ABE1E5B29D95D\"\r\nLast-Modified: Thu, 02 Jan 2025 03:52:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8880614855979518746\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QxXKRIDAvIvaCr4eWynZXQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"4315ca4480c0bc8bda0abe1e5b29d95d","sha1":"44cd40351b2389219a2f2c4d63660cd30d9d0739","sha256":"e27e3ed79f0acf02999cb82c41f11852b83eec445b8804f008514764382a11fd","sha512":"44d0a7c9275f059daf7c563752b5d14299c320989713855f853436f62077b32114491d8fe9f94b61927b16698ea8e7d345078a84ec31248ee0016f211ebf60b4","ssdeep":"","tlshash":"3011b62b17507e488ebe562a2511ba296179f99a122bdf130ea8c40a0119f8801965cb","first_seen":"2025-05-29T23:41:24.325311Z","last_seen":"2026-04-06T13:18:05.342783Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2042,"timings":{"blocked":875,"dns":15,"connect":285,"send":0,"wait":289,"receive":0,"ssl":576},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}