{"report_id":"41713816-dc1e-422d-9b8e-38023aca5612","version":6,"status":"done","tags":[],"date":"2025-09-09T18:54:33Z","url":{"schema":"https","addr":"emirex.app/","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":0,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"emirex.app/","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"title":"emirex.app/"},"submit":{"url":{"schema":"https","addr":"emirex.app/","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":0,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-14T18:54:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"emirex.app","ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-09T18:54:34.497008Z","last_seen":"2025-09-09T18:54:34.497008Z","alert_count":61,"request_count":61,"received_data":1174705,"sent_data":28547,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"stream.binance.com","ip":{"addr":"3.112.120.232","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2017-04-01","domain_rank":283179,"first_seen":"2021-01-29T10:54:12Z","last_seen":"2025-09-02T05:31:24.301748Z","alert_count":0,"request_count":1,"received_data":240,"sent_data":693,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/8e1d74a4-03d49b958f7941d9.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2beb4f5eb2cc639efe752632de18681","sha1":"eb553301987db147ede707d6e94812a42bb654dc","sha256":"56506b5f024a1114a0d0a604e1f033fc13a78eaedd89b7923e7b426e6cd3e8d6","sha512":"5241789badf2f045c589b71ebc3abbc1995854d3fc38c10eca6b712ed24e7fb770e88ca5ef26c2fb71bc40f050463b89fd44fbf0ee7ea08d5d71024cd6b7fd87","ssdeep":"","tlshash":"09310004513833e56dc946318a15580f24596e9e34fac4bcab28ca91915b7bdf9134ea","size":1461,"data":"","first_seen":"2025-09-09T18:54:39.288729Z","last_seen":"2025-09-09T18:54:39.288729Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/assets/page-1bd83f2e720cc9b0.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2e32db44c3482ee0e569c4aff95e054","sha1":"3b1e993adf2cf7327b1d1477f3699eea4e0ed46b","sha256":"a7938c2fce00b125f09760162ddede6c0a881bccd402acbf1f3d19a3eeded9c0","sha512":"809cad551491725eb51294aa833ced614fc9eafd3c1713005f114bfbcf18852b4f77d50ebce1af5163a581ccecc0682a50de7a8e7bd18f828a56c3e29c548efa","ssdeep":"384:ydwZdTNQUxMawaEgEXmEZj3p7vv/Wa7nudwpIuXl7UFka6OUGpapVFAsDklSLm6m:yd6TNNx9izXll57vnLpI2lIQOUGpWVwZ","tlshash":"36a2d850e252fd6cefab15d8145e008df21d2f4dca0f8c65f2f85c1a16d64c879e1b6a","size":22087,"data":"","first_seen":"2025-09-09T18:54:39.263672Z","last_seen":"2025-09-09T18:54:39.263672Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/4704-ca0b2f6c2105ab3e.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"73cf7d0798254592af9bd3637fbf672a","sha1":"2ca30c3540938457bed3885e5611524ecf5bf37b","sha256":"c244a3e50432ca080d6dde87aaeb12669ff1e8510843ade4fbc9ce5cd18d080f","sha512":"2bae905e5d613567bc3e5824561683da27cc7d76fc9e0e963b09de483c806cdaaa324c1e3032da8609f313894e3a6bd90fa8331f100ba0bbd1097596bb3f80cb","ssdeep":"96:tHeQepY0XB9OMC3pHlRO/Fz6SBuBj/DBLjNCK5O0j:t+HpgtlRsp6SBuBjDBL0KH","tlshash":"1f8165ad74d1f49057ab10f2447b8419f3796ca62c0c91a0d7f189ca78f026e96b3f1b","size":4178,"data":"","first_seen":"2025-09-09T18:54:39.335323Z","last_seen":"2025-09-09T18:54:39.335323Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-08T10:25:13.271306Z","times_seen":217467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/1255-20045df290cc858c.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ebf48dd8ad0f1ae301fbe6141c6c484","sha1":"509f96793cb1f17481896dd8f11317cf38af12c2","sha256":"7ce4e53d637414e3ad78771b3d9f14be601c8010d69d336f9f78c7c0a799352f","sha512":"5cd10a371c53bb0d06c2e2d439e8e851c7cd875afcdb5327308ffc70d244f13d697fb27a6a625f13fa6d7233a5350c56030ebc959af518aec7878cea35a356be","ssdeep":"1536:7h7TN+Izz+cHr6U5eHM0dQ/7vyBPo7ecq0MEsoMmyu9ym0OZp+ureDJzQci:NTN+UrFJ0uuwF5U+Zp7reD5Li","tlshash":"f2f3c9b676d0f8d107a780e5843b400af3295c3b146f74a0a3e6dcd975605dea1b3faa","size":171606,"data":"","first_seen":"2025-08-29T10:45:07.922534Z","last_seen":"2025-11-24T04:50:56.225415Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7373972443152ebc0bad971d2448e4ee","sha1":"5f584d653eda056acf1e46c4549cada2cccd20be","sha256":"062bc1144da378c979c5eaedfb1333a81a94e50bac307a2206e25110366fed6c","sha512":"384be0d9301f832b549ea466e937383b4f7ce97a5660d92ae24b1c65e29126deaf1681b1b9367280690b23dfd91b720677e60dcd3c12f569ab3e3181fbbae4c7","ssdeep":"","tlshash":"0d31db9fb559f8a13de7cd1f81372e778488dc7a1238e1aca55ec92a015083f53aac42","size":1822,"data":"","first_seen":"2025-09-09T18:54:39.366534Z","last_seen":"2025-09-09T18:54:39.366534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/f8025e75-d6f939abaabadb45.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"70448df5b7eb39369dadf5a1ee0fd2f8","sha1":"ba111ce4acc0d7de0f36bf21b55f62d27eeb8aab","sha256":"ff418e2c2b9c0f115b7d854282585f89ebcfbe93b322ddeb7ede697c0da006cf","sha512":"3283fd78bd3106feae4ecac88412616a7d5384ca8f6959fa74ef47a05386a915b06945de9599186bc0d2206d369ff241eca1589d80227f747ec973b386fa4628","ssdeep":"","tlshash":"4d11424a1b4c26bda8c5c4602713a4134759d7fea0feb4b59f2c60b4839340be9774db","size":965,"data":"","first_seen":"2025-09-09T18:54:39.290486Z","last_seen":"2025-09-09T18:54:39.290486Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/4274-6331106e47a41e2e.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4df20faf0de167ed415d7e7d9bd67166","sha1":"150cdf99ad7fd106366d9eeb233a8c06a3661f7f","sha256":"55328d3edfdabcdb9b860a6d96d2fa8546c03f723952f60db618f4637565b78f","sha512":"9deeb6d457b156f2169e0018edfc937c0b7d85a5fee5075237ff365305a27c46fb734b4ab6d563ca09cddc3712ee8ce5e122ac394fc7cf5196183861a0dca25f","ssdeep":"96:udMYRwLpHjyRNE5YF0TPZHbKzbxmblrpq6/b+kJD4PyanDMidlVRGVJC/Y:JOSMAPx1bC6zdanDMidHRTY","tlshash":"c481d7ad21a6f42ae667410229261514622e967c2d8dc47dfbb8ad0f00d60c427e7ebe","size":4168,"data":"","first_seen":"2025-09-09T18:54:39.343972Z","last_seen":"2026-01-13T10:45:47.167776Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/2619-38012e79151e370a.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"516f3cb49de60dd6a41bab407a170980","sha1":"bcbf74fadeeb5197ae421aa9cc7831e3320a16af","sha256":"ef541b7c81d2f249be6f2b980481122886deb80b0ab842f9c967d087c02be194","sha512":"a460384997a7793948361cdd0680e36b6bdc982b291ce0ce6cb22c75203a57bc6408ab252fb70c47887b78a8d53fa161d4cc7cb0f8b715af47bce0a47cb191b6","ssdeep":"192:hYOHCx4wMcGWgSaxTPKnMeoBqSgZc2c3GbjqSkT:hjiGwMcGWuTP8MFmorH","tlshash":"b6f1c9dab1e1f8e2836b1190443b100bf27e5db5181e9194f7a95ce6f9b042c91b2fa9","size":7789,"data":"","first_seen":"2025-09-08T17:30:11.398709Z","last_seen":"2026-08-03T16:55:55.525837Z","times_seen":798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d1f343ed848439f9f222f48e392c8e3","sha1":"a38d253bf4a94c806aad4391121bb1d5bd768f10","sha256":"83d54147049d3c6aa12b6179a7b8cd7884699f0f19e0c811baddf9ea9e0f3eb6","sha512":"f17a32f203b96b2558f2062eb0db4114d269c4c7ecccf88c5edbba21729f7c2c4c4d4977c79d85814ff3b0901845cee981054ea02a16a82946f4706f1d9c6394","ssdeep":"96:LwZ7D7cg1xqzc/xmWbpgDhSSYExqzxSSuG6hSSuzDSSuNsaWmpH1baQ4:zgnqzcpmBqz5mu","tlshash":"8291ae2db005ea8ffdaf3969013eec7b20ce456f07a59af44685ce540a414793797ec0","size":4563,"data":"","first_seen":"2025-09-09T18:54:39.367955Z","last_seen":"2025-09-09T18:54:39.367955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/5239-136a094e0b5448de.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"78a4b93d1444c0f87ba9f23c6546adc4","sha1":"82b0d97d074f672f54231712acea2767fdaf8c47","sha256":"9875c55e6ff35fc524f6247bccadace95b3b741f2f4e2fa7c0db20215174f281","sha512":"225ddc9ee328b16c7c455ef6e8d7fc6d771a81aa6f256ed5e32f2204f25e451eb89d0abef02402400eace8bd054503b2c675a8a45d00e049cf963ead0d485f04","ssdeep":"192:yC4BeIA59d8/zIQJ5UaWA3L2BV9wrd9dMtFuD8avnP9GRFVYLJxM3buP8ww:54Yj/W/zzuaW6cV2ZjD5P8Ck368L","tlshash":"d5620a723695fce6639bc091c83f000df3756d71623ab18873ea8cc9a5a4584f0a2f76","size":14918,"data":"","first_seen":"2025-09-09T18:54:39.311884Z","last_seen":"2025-09-09T18:54:39.311884Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/8809-818b71ba4e291ecb.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"84fded90fd18756ce4b1e5afe93c71ab","sha1":"1b40f93851d13bcd60503f1b18d4a57167f0db40","sha256":"d7890a259fe1687fa0d58d0e5ba93829c8da8364910e8f1d5e56b341f853b738","sha512":"ba3cdac0281f4e51fffe7c51ec203e36138485325bcc4bb643aeea6987279f4bdfc29961e21802d8601e180dcb4945130cefb198b8171101d257f0c13d3aeba9","ssdeep":"384:R3JL2phyAOgJg1pMpiS5GqRN2Av+6Pa4neM:IhB3ufzS5GHRdM","tlshash":"bc92c6d87381b535a3cb25a5805f540ee33e7a25140f4941f269e8d83a385ade2b3f7e","size":20776,"data":"","first_seen":"2025-09-09T18:54:39.326379Z","last_seen":"2025-09-09T18:54:39.326379Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/trade/page-c290591f34eae42f.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b73c72a6b0b710f256bbfcf9c5010968","sha1":"1abace22e4785e0619fb0faf863ce33505048ba0","sha256":"4bac74b9ecf5d89f396f4d8e919ed991214561827da2555fc722a405cf27d1c3","sha512":"b606c903e1e76ba56c0cdf49062890f44a7565a0cab3fc71bd96feb579ac9d4ac2bf4f25df0f57669613eab58e4aef62e94bfeb675cf8e0ee927e544bfd251a6","ssdeep":"192:R/iYxuH9c6So267BJ89O/iH/566k7DvvlVme6:R/iuy9KQB69Tf566GDvdVa","tlshash":"88226694e352bf9cfa2644e4a91fc00d720e1f88db2f8875b1b93c1a16945c47b52f9d","size":10594,"data":"","first_seen":"2025-09-09T18:54:39.280795Z","last_seen":"2025-09-09T18:54:39.280795Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/webpack-e526331b133ea150.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a44c61df37b57acc22710a2d8b4c1e6a","sha1":"b22d05a419d914d18886e23515ae8c48c46c15da","sha256":"ae8652f045ab8ff4e59a850853c233ad262d31fe9b83f13d9ce556ae5358ed0b","sha512":"82f1f1b84303e7c59de1c95d83f87814466ce2e2429c2ca8c1e8d3c0a9db725279285dec21b2fb600539c03d35fa910af083b5954f08e39539bd85cc88e5aa2a","ssdeep":"","tlshash":"7371a6a53521eab557f10885487fc651f629103b151efcb0e71bd8f6b4649e20162ff3","size":3634,"data":"","first_seen":"2025-09-09T18:54:39.309388Z","last_seen":"2025-09-09T18:54:39.309388Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/9829-1d93d6e89556abfa.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f041e437adf38447044b9595f34e0823","sha1":"5c4270cc4cf7d02596af252c0c1f161cef7e3a0e","sha256":"d78d8555e093ce67f63f0f9f5c3df37c6c5209839d2c69a8cdb7da7cd446110b","sha512":"15f06b00df4257bfb7cc2beb4c1c95cb13029be463a0362785ad28385f00e75d59fd0698f823cfbbe2e17a8555c00689c2aed91bf2de1c6c2f8e2de441122a1f","ssdeep":"384:7/mz48FmfuNhuEakCyTvpzWNy1SAITSGwnCLSNCcX4U8b+hyWSdQcrnO/AxwXNRw:7/msuOyaTSGwcU4UThyWVOun1DKt5","tlshash":"9403f8c5b321a06243d691a384b50203f32999991806455cfb6ceeffa97cec971f6f72","size":40598,"data":"","first_seen":"2025-09-09T18:54:39.332255Z","last_seen":"2026-07-22T15:01:08.117964Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/5838-0fc4d2d6c247f045.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cf4aaa2d91e5ce8a8ae92be4363b5b6","sha1":"6f44a31c96d976c0b932975f5797c4a960a8a632","sha256":"6fd91b06bb06b947978b92fcc93be71e08a447821229b6872b0a5d3a5c10c497","sha512":"bc25eedbbf29a855a937a74000a479f8ba2bdd6f2e2f848d3264ff1301139e129edee3daf2bf17c29fd814e24911ce0d2dd38d6dbfc9c1d711d311b062135fcb","ssdeep":"1536:EgDag8T6Wj4tuF909ot9uNphzOBeMvx67dcAjfKZCP8IRCUMQSICxrVLw5:LSZp90WahzOBPJzu","tlshash":"7ac3f6e673517561d3cb51a9c4af0741b33a58d8201a803cb6bdedcb682058d62fbb7e","size":118589,"data":"","first_seen":"2025-09-09T18:54:39.282549Z","last_seen":"2025-09-09T18:54:39.282549Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/(site)/page-269caf9ae75c85ca.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c088fd2412a9893d34d072aa9733863","sha1":"f6434889ba516b84969ab71b98db4f83a3dc48ed","sha256":"0229620e14fe59bc3480916832fabd9b7e1ca8a8a40a1eb651c7d3d4307d9d4b","sha512":"0f4d74f8b3cd541ab5bf5439b6439d11b12dde27b9a626c3da82b9cd423154a3da210c00c68701966b08daf44f509340711fa6813541cb65ac51d06d3e00b30a","ssdeep":"384:3tkCF25CdrqsjxMYlnPqGQ/tQkcszWOML/2ZM1PxwlknSkdsWr+jOLJhK1:9Vc5U7MYlniGgQ/szWXPxqqbrWOLJ01","tlshash":"3bd2b360a152ee6cf6bb01e9a51e401db12e5f91de0f4c34f1b83c2626448d8b697b9e","size":30310,"data":"","first_seen":"2025-09-09T18:54:39.303123Z","last_seen":"2025-09-09T18:54:39.303123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/5828-0c559b8df123a36b.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2a145e0e34e45e6cec1ce5c16a2af62","sha1":"1dd4ac3192980e5a0a58883fe1c38b12c35fb169","sha256":"f7f0991d3e94b207c3e008a04c3b74f7bbc885814b54b15db629a5ac3a89844e","sha512":"671acc539d3241ebbd2c1ba1d102c19ab29dcace18e9bfa640d65453728cc4f53a82157e9ad1855dad90e4f784b1742e58fbd6706a237ffb0077a2b76b4755e5","ssdeep":"192:YY5BjAjGXgB2eITzpzaI7WmW8DB2kVkF7FEmmoq1nwSh+NWdp:Y+Bjx19W+DB2ekR6FP1nwShcWdp","tlshash":"9702c67673d1bcb6634bc08d882b0009f27e5a3c261e5464b36e6ca967404d8b2e3fd6","size":8515,"data":"","first_seen":"2025-09-09T18:54:39.358373Z","last_seen":"2025-09-09T18:54:39.358373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/referral/page-16dd304649f14fe2.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"47ac5ce2127c1a106c394fead2b47dd8","sha1":"c617b601632f8d08c58741c41912ce52fe404ca9","sha256":"5be7f32d53bd9b6223a1a075d341d286ae9cb01c1524ca5066822d5969289166","sha512":"561dbed3f305a139eb3aeb4c4b3efeec69e3bbbfcb691d8f4ed0a42bf868993973834859d12a1b0768e86c5b9bb98afab274ef62ba93ed352a33db5909170770","ssdeep":"192:H0rE2uoq3PKZIBibsOF+MIyoq2cHv3oCHUvRcf2kVc2KcFz2u36:HwE2xq3PKZIU4A+Hyo+P3ipc+scuFzM","tlshash":"9462b680f251fe7ce77301dab45e5109b12e2f5ade2f8824f1b86c1532844c5b7a67ae","size":14834,"data":"","first_seen":"2025-09-09T18:54:39.261471Z","last_seen":"2025-09-09T18:54:39.261471Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/5936-0b30fdd42348c73f.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e104d113eed914e16d3f2293925115f","sha1":"eb95d23b812e729bb98f190e326739cbe8e9acdd","sha256":"e1e297af49b7714349bd1deb12dd0991452a326f82d7e9cf5f38c7919efe4cba","sha512":"3fbd4c7cf5956c3f2468f947d707358967b910df405a26f43da1b8ba836c565fd13ddaa4d4670fb9a2cf77fb15752ae45e5826c245c87756ad6d03975ab69933","ssdeep":"384:kyH+02mFKCd85J0znsHXMce2N68teBA5Yn3QuCYXzU4JKzYqk/:zHhFKCd85J0znsHXMe68gBVgfEzU48zU","tlshash":"a372d785f152fa7546e762d2442f220af23a2628300dc49cf6bcdde469b580be577f36","size":17040,"data":"","first_seen":"2025-09-09T18:54:39.364306Z","last_seen":"2025-09-09T18:54:39.364306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/eec3d76d-fd16e5e20feca3d2.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a022435211eb398be877b794103cd21","sha1":"922dd140f33d0ead6867b5b26bc5d0262e571c54","sha256":"ba5dc37c86dfd3f9872280e03d2708ce0654f1597528eeb6826a51fd019e0a39","sha512":"a0c7734fe5c8b9d22af8d3aa83eab1b4497688a0f645a8fd03e392285e4bf07d8118971ced8d4ebc1e3b8cf12e6a5e0e0bbedc46c7acb92c4e8fbc25a493aaf2","ssdeep":"","tlshash":"ff0145a9120cb65f348709a407b29436ab7d190b31afe0f44a5fd6601043488e3278ef","size":723,"data":"","first_seen":"2025-09-09T18:54:39.361518Z","last_seen":"2025-09-09T18:54:39.361518Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"abcb479cdf811e9df9d058160949c6ea","sha1":"bb14fd5d027e0f4423e4cb0f833a8fe22dee00c7","sha256":"ecd7b79afbf0c69f475a76feb378fbb45a1a907a6c794d7a8d00c92e4a3a0dc1","sha512":"86a59693ec589c5a6253ca8777f4f710490b1cb28043bf04fd77b72eb30fec8e43580043ff8b95afb62a3a4392a14dc88e0ec800c7b4b62990c6a39a4a14f770","ssdeep":"","tlshash":"05b09268e011fed129aa21b26139f0ca326f584d196424b0212361d812842192703fc0","size":102,"data":"","first_seen":"2025-09-07T19:21:45.123605Z","last_seen":"2026-08-07T20:34:34.524912Z","times_seen":770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/earn/page-4d3f7328a24b8581.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e03a3ef39a2ddf7ac090b46151149502","sha1":"950fb430d4aa30135a2fb8c13f80f1c09915821b","sha256":"a78bfba1fe317e1be5520f5baf8fa14c10f324ab81c5ea79f4aab5ac3dd9d7fc","sha512":"5a443e76118b3ab9de5ea63cd63e3d086fc11c9e8630975a34b87bd10908a36e0be47978a43229d18c77d7822bd52a828dbc1108c89fd390e3276a1c5635959b","ssdeep":"384:XzjPe1IhL885Ue82e1/t+YVwU9ws5n2B2Q/DxN458LI0OI:DqK5UCa/tD+Ue8WDxNF/","tlshash":"4cd28251b552bfadf67b05e9a69e440c711f5f88ca0f8c78b0fc7c0a17458c8ba52b89","size":30148,"data":"","first_seen":"2025-09-09T18:54:39.306023Z","last_seen":"2025-09-09T18:54:39.306023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/1371-06715e27e428eedc.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c97ca1bb9e628c6ba2dc936ca1d1c56","sha1":"6ebe8b3a94164d9e3bea2f82caa82d4cd2f87fa3","sha256":"21e888b78e47cf3637a62b65d1222582b7f41c5a1d2655f8bc72813c82c961ca","sha512":"cbb3c1fcd10737c2e00f270863852e6ed786cd3a906233e8dbf71030dbdd85865f4ffca251057fc3e0f68854aa6efa3edae68dc70b3d6eba09ed27eec6154476","ssdeep":"192:Od9hdO8lKbCKvb56f0ZEovl8mePMMgM4dLdYlBQ8xLb0nkO:OXhdrKmKTsf0P+PMMgM4dLdYH0n5","tlshash":"cf325305f016faecf63a81e9965d452c622e2b88ca0f8d74f17c3c662944cd87797b8d","size":11799,"data":"","first_seen":"2025-09-09T18:54:39.348511Z","last_seen":"2025-09-09T18:54:39.348511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/markets/page-492676949abd27a7.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e3a8c250810550f4f48479e0f6bf1e4","sha1":"13048fb6965e9b1c5c0542ff5bd60bd573afdeb3","sha256":"2cf0b2ebf00275f5b7ed220653c1f1fd12629aaf93522c535f985eb9ad9720f0","sha512":"7888e378d760076862d38cf3120f69337eb4a94e83195b4dab443a91ebfd7669d53ea535c46df78daa57596c2740ee2478c10c685d3ad5bd6c9d1a6cb9aea104","ssdeep":"384:u32ViXYUIVEY00GH202GHP0GhCfP2PeGTPGdShUQexKg:JZ6Yvb02kP0gCfP2PeOPkShHg","tlshash":"2a92a7589302eb2ce17a01c6dd89d10cb12d2fc2d76b4624f5ba2c522714ebde76af4d","size":20292,"data":"","first_seen":"2025-09-09T18:54:39.349938Z","last_seen":"2025-09-09T18:54:39.349938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/main-app-9cd083343aa1213c.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff63b3636e16a32f06fcc9a73c703b44","sha1":"e6b851b48843a90e9fffeac0fa245e14e971ef93","sha256":"25b0c7d6549b268037714f51cf680277bbf2da03b3e02823b29b8f97119bf87e","sha512":"2b1c5d1160fa98357905355dc1cfa391eba4c2cde9f0be40d5f40e98f69df3b2f2844dc5962c1a891b6eb3499a5de36cbbf2a09253c940173d88ccba1467cde5","ssdeep":"","tlshash":"43f0f49a4f1cf52f5c26ad60fe97ace2285f4175302b4e647914eeb23c23bacd270409","size":560,"data":"","first_seen":"2025-09-09T18:54:39.293821Z","last_seen":"2025-09-09T18:54:39.293821Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/9267-f1afd135ccda434b.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eb5774dd8b2c2a7a7016fa77f3628c3","sha1":"caac3a98e78e30143b4e4d9852b389bf73930613","sha256":"cdd5dd0ba0e3e649f2b2f4b2a7ce2dfcb4b7930258bcec59a8218b35f04cf382","sha512":"0ec5623a069bd7fabc1d9ee268467d2d5340e55133b9a174ee1fde921a81e0e06bdb4eeb4ada36e334cd7f2ed7e9a06367ec3a9ba54f456d01e0b167d5b5adb2","ssdeep":"192:3FKB5g9DRu40LvMo0s1AzzuE8wGcBzPfpS5MEYsrFH9SoQHnb3RkjaAZhiWD+9w1:1IghRs5UuTOzPAbHv8WD+usBvixos","tlshash":"6e82d6ea7792f07267ba56e7c03f0056f27918b9245d4000f355d4fa38b049da6abf3a","size":19217,"data":"","first_seen":"2025-09-09T18:54:39.337188Z","last_seen":"2025-09-09T18:54:39.337188Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/layout-ab5894527bcd19e8.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7089e8fb3611ec7ef7102a9b0e7c0066","sha1":"6932f73a7e5596f7d704bfe7303c212373a1121c","sha256":"b5c02558cb190c8af4ca7628d23eda93909fae2cabd92d1404edcbb40f110e0e","sha512":"bc00b8475c21d4ac412b0a710fc72760d57615fbf13eb266f1b056bbfc0eb9a86494590f0d20034c0ff5df0e7cd070694627de39001c8931c219425954478636","ssdeep":"1536:1t1tyHXQHXMb8662Xs05ija3EL4KD8ZL5aE9BwgADDQDGST:eHXQHXMbbXs0AkELVoR5aEfDGST","tlshash":"a9934c4453923efd5b2202c864af611d731d29e9d75e88a4b5fcbc1d22dea80b1b7f48","size":92118,"data":"","first_seen":"2025-09-09T18:54:39.291753Z","last_seen":"2025-09-09T18:54:39.291753Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/795d4814-a0b7928aad0fea45.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"943db92cfb3bd78c9106dc93f6d5122b","sha1":"f59f1c2ab7740fc945de709439fdf71c4dc6771f","sha256":"94ee004d17d854a074d1b5a58806353c029b43986e6e28644ae01f73cf903857","sha512":"dbace9f716a01d4b89e191907b569e24cd2b2f04934fc86db6399fef3cb84eb19df10221de5bc5fad330e8e3cfb50bf6fecff229e565946dbb05b14ed7bfb612","ssdeep":"","tlshash":"fbe02b8120652f967c954ca46061e41311ad27ef31ded4e85a60044081a165c5623cfb","size":364,"data":"","first_seen":"2025-09-09T18:54:39.300442Z","last_seen":"2025-09-09T18:54:39.300442Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/trade/spot/page-5a6b4c6c558a2434.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c5d7a8d680943f3d97f6e77d7a34aeb","sha1":"70783afea0a32a694627fd3ddca8651ee88e8351","sha256":"e14e389342eaa73d837186efc412844c7850147a324ae9d37a05b74c3871ed9a","sha512":"378b5abba54bd04ebd7ce5ef9a79f5de556635f29dc56c8f2b202006b7d809082b552fa65631fcff9ab463d603de01455de458511616a9347517fa2ef3e697d5","ssdeep":"96:L8G7IIt26S/mrxEsKwf3KqWE9x3OlzJ+nf1xxcZMT/6ufP6:L8oA6bqsFfaqnNOIfj7rH6","tlshash":"90c1ca95e3127d7dbe6908dca65f800ca10e1d1cc72f842ab2bd3c5d2295d8876d1fad","size":5976,"data":"","first_seen":"2025-09-09T18:54:39.362918Z","last_seen":"2025-09-09T18:54:39.362918Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/5061-e6c2d211f3f203c1.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6933017fc43b6d2519d929c7d442ab39","sha1":"d63973f3a887c53f22edf89c3df705f99b43c779","sha256":"4a27af75f50a9a70fbe5679d60ae873636831690fdd1e694b4f8f890acdb43e0","sha512":"dd28757c9987ee4b0e2263d2997bb60e634544b2f4ad70c35b863a3e21ef5582b00c55ca3a2ae1342459f493b215cb416b3594675716b21bbbe3dda67bda75c2","ssdeep":"768:6KX//MhIkd5fj63Usv/XjLsad+5sLgQAn3CSoik6d4qaId311H+A+0b:6KXnMhIkd5fj63Iad+5s8v3XiO4y","tlshash":"30b2d924b253f65daf7f1198a06d404da21e5b0add1fcc70f3f86c0b125a4c87ae2b59","size":25144,"data":"","first_seen":"2025-09-09T18:54:39.342239Z","last_seen":"2025-09-09T18:54:39.342239Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"22d3db02c8656079bed097eddc75a239","sha1":"6fe6b427f68e607a8dbb50a15411ef35b0e01c8a","sha256":"2a13c56de69697e8fd63757303db5d4a83035e82263ac9396296842b614c5e5b","sha512":"2a7a432bede420be034ddd69bb20bfc1411bac347e77d775832419ed0f9f649ee6647bc2f215a98e6bd9497e85bd04d3f9993a8a078b50e47655c7fbf2353c70","ssdeep":"","tlshash":"a5c0c090dc02cc2ccb664f221c3b0c3a21ccc56503054206ecc5ce281981b3005b0dca","size":185,"data":"","first_seen":"2025-03-20T10:46:34.786122Z","last_seen":"2026-08-08T00:03:34.947355Z","times_seen":1287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"fcc9f0ce59729e4de61ca7914b564f75","sha1":"a6071529e2ab7241b525b1e77999a81f4ff9dc2a","sha256":"c15524112b3f232b3a0f029f6521c5a294a5253fbc3c25442ae4c96eb454dcbc","sha512":"fe20c71865eb794a0a1b045c93c34ed16f106946c47a88989c48a278913489076d2ba28339be403249ff9e6f7aff9a23fe2043a240baddbfc9c2efe575ec4ffc","ssdeep":"","tlshash":"c2f055043819e90bc6229da112be2c3080ca82b809905d7201c5cc8a84b08b97fa2b1a","size":440,"data":"","first_seen":"2025-09-09T18:54:39.371777Z","last_seen":"2025-09-09T18:54:39.371777Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/4bd1b696-f785427dddbba9fb.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7040f9644360f35f2b988c55e8ce4072","sha1":"87ad12f2bc364390c191172a9a9af6ad70b8e07c","sha256":"51a7146e32f6a18a96676813fd791cd1b0265c675292acb31196720ca9e79726","sha512":"9b801d74b75a094a73a2155b3d73d5344ee74cbcd27070ea57dafed253f73410770fcc2e7e4436636c7eb680743e717978f7f80a736bf8d691e9f9b2b96e7748","ssdeep":"1536:eWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:S9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"def3f8ec3d99e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173020,"data":"","first_seen":"2025-08-29T10:45:07.929156Z","last_seen":"2026-08-08T07:15:31.626361Z","times_seen":3665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/66ec4792-946e5930f805266e.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c10436c31199faccae05e31a714a4c9d","sha1":"a892740a7597a2bda2d9f418686e8965d1ea1341","sha256":"2ec52a73312cdc0038d7b7f77aea3566b12cde47552e4543e01b2a5bb7955584","sha512":"4ae69707e0ea66d1a4bc464fe0243a4a1080165cef7496dcb5eadff62aff34aa0126fbbea855faa611ad6f8f4c46221b8e6be0c80d45f3a64b269dcf84290546","ssdeep":"","tlshash":"126132a2634c22fc5888c4688f57b05b213d72abb0fa14f14b9d8d48e1c31a5f01b6ab","size":3227,"data":"","first_seen":"2025-09-09T18:54:39.272822Z","last_seen":"2025-09-09T18:54:39.272822Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/30a37ab2-39774dc769517f98.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b18dd72785ba085fc97843e6a2563f7c","sha1":"9e7fc3ede47af7c4de1fb706a039d9f31b1b0ca9","sha256":"2fee631aa12d845980623b207ee144189b58d1d9e53a34fee06d51a2a7481cb7","sha512":"a37decec4286d65062294cb6781ea1037049725c9034108687929c0f4ca5d0f1dca621b3aa6c748e0d359bb5958fc5397cc24dc7d09233d335baa96622aa3ba3","ssdeep":"","tlshash":"2be0688b61947b546e4749c494e328b357bf352e799ed4fdcf614c5404a147c41238af","size":362,"data":"","first_seen":"2025-09-09T18:54:39.34568Z","last_seen":"2025-09-09T18:54:39.34568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"50d79ec1aaad6451be319ee0a696dd33","sha1":"4c191932bce63f31ced964e8d12c43032319eb2f","sha256":"a18ffae3960d9e2233da3d3662a0efe78954111d876c75896980973a34b548e9","sha512":"8ece952c854f234307b3b86c0026adca369e0c729085c91538845d3c06e03b512b772e3b073880656e996347b554eaf5dda532f30517acf93f2fdd585fc88cb1","ssdeep":"","tlshash":"c3900470d0400d574533001314fc7103155cd04c0c011d501f51fc5f5c531d57707dc5","size":46,"data":"","first_seen":"2025-07-25T21:09:25.855802Z","last_seen":"2026-08-08T10:27:44.829002Z","times_seen":3314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/3923-98771f1e51080527.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b1f5ec76ac41a145315fc100ab01a3c","sha1":"2eb7528bde8394570d707b5d24cb0f0a81a56a3c","sha256":"6f8af72a4f079e1e7b6c23c100220631168c836b655cd089376deb3923fe8feb","sha512":"b93d39d8c435e3a0cb4d8129d519fc16072daff5542a996544569220a3a1dff799c2fa50961c12a83e949ba0802e57b4bc9f24f02ae8478f88e7c570ada0ae9e","ssdeep":"768:FGttJslTck93sEnOHik0d+wG3CFOX9HXo5QYLJjwXFM:FGttep3OHik0cSOX+WkJkX6","tlshash":"1b332b95337b763643ee81c960b11104e73999991848280dfa78bfd7e491e89a3fbf31","size":53262,"data":"","first_seen":"2025-09-09T18:54:39.318636Z","last_seen":"2025-09-09T18:54:39.318636Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/53c13509-78df5fb8e2353a6a.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f215888823bd3aa26ebc5f7952067cb6","sha1":"7d85c0c16e685cd64ea0dc4701340b52ef948a42","sha256":"16194f060efa11647198942ca8fbf764238677b4b59b6aedbbf14036e00240ed","sha512":"b4ab5068e2dc0d4888b19547357e6f5e066a329ad2cd5a90acf413756bf3d7f2b7b4cb04182823ff774a97d6c2f444e3fbb6db7430b3524bcdfe35901e4c0fe7","ssdeep":"192:yPgsMSwx975xmry1zcIHdIv7SFUgpDLastcg:EgsF05xmrFIWv7SeeDLastcg","tlshash":"9c02555dd02862bc9e854370856274b11a9c19df31d9c4bcbae488a073a319cf6bbcdf","size":8394,"data":"","first_seen":"2025-09-09T18:54:39.35999Z","last_seen":"2025-09-09T18:54:39.35999Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"emirex.app/earn?_rsc=1352e","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /earn?_rsc=1352e HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(site)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nCache-Control: s-maxage=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4533,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2728)","md5":"f7514899df7b15bacbcb4a950820299b","sha1":"d36be06db19c4d7a6ce1958c8776bf2f964e4a91","sha256":"df166ec14f9f6de82931c0036c1a515ad20a5253a2b152546a31a2f202ed1e18","sha512":"5dedb25007bbb1def49a6a74d3fc00c627de002713be5a852e7fe7fc826a78010b514f0c532c070de632f7f8d75dc1ed377397f0acf596f41132a00e0603a6c3","ssdeep":"96:KMcNfcSnpB3MxBQlnOni6c7afUHDAz/kM/VUu4rhVv+jX:RSpGdRIAz/HNYW","tlshash":"9791e13b4a09d97b6ebb8194406fd71b928e893b23300df4c6ed5e2c075513a6b8b6d1","first_seen":"2025-09-09T18:54:39.259033Z","last_seen":"2025-09-09T18:54:39.259033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/referral/page-16dd304649f14fe2.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/app/referral/page-16dd304649f14fe2.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"39f2-19923fa9131\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14834,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14832), with no line terminators","md5":"47ac5ce2127c1a106c394fead2b47dd8","sha1":"c617b601632f8d08c58741c41912ce52fe404ca9","sha256":"5be7f32d53bd9b6223a1a075d341d286ae9cb01c1524ca5066822d5969289166","sha512":"561dbed3f305a139eb3aeb4c4b3efeec69e3bbbfcb691d8f4ed0a42bf868993973834859d12a1b0768e86c5b9bb98afab274ef62ba93ed352a33db5909170770","ssdeep":"192:H0rE2uoq3PKZIBibsOF+MIyoq2cHv3oCHUvRcf2kVc2KcFz2u36:HwE2xq3PKZIU4A+Hyo+P3ipc+scuFzM","tlshash":"9462b680f251fe7ce77301dab45e5109b12e2f5ade2f8824f1b86c1532844c5b7a67ae","first_seen":"2025-09-09T18:54:39.261471Z","last_seen":"2025-09-09T18:54:39.261471Z","times_seen":1,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/assets/page-1bd83f2e720cc9b0.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/app/assets/page-1bd83f2e720cc9b0.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"564b-19923fa912a\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22091,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22077), with no line terminators","md5":"d2e32db44c3482ee0e569c4aff95e054","sha1":"3b1e993adf2cf7327b1d1477f3699eea4e0ed46b","sha256":"a7938c2fce00b125f09760162ddede6c0a881bccd402acbf1f3d19a3eeded9c0","sha512":"809cad551491725eb51294aa833ced614fc9eafd3c1713005f114bfbcf18852b4f77d50ebce1af5163a581ccecc0682a50de7a8e7bd18f828a56c3e29c548efa","ssdeep":"384:ydwZdTNQUxMawaEgEXmEZj3p7vv/Wa7nudwpIuXl7UFka6OUGpapVFAsDklSLm6m:yd6TNNx9izXll57vnLpI2lIQOUGpWVwZ","tlshash":"36a2d850e252fd6cefab15d8145e008df21d2f4dca0f8c65f2f85c1a16d64c879e1b6a","first_seen":"2025-09-09T18:54:39.263672Z","last_seen":"2025-09-09T18:54:39.263672Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/image?url=%2Fimg%2Ficons%2FMarket.svg\u0026w=32\u0026q=75","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2Ficons%2FMarket.svg\u0026w=32\u0026q=75 HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 589\r\nConnection: keep-alive\r\nVary: Accept, Accept-Encoding\r\nCache-Control: public, max-age=60, must-revalidate\r\nETag: Vy8iMjRkLTE5OGNkNTllZjQwIg\r\nContent-Disposition: attachment; filename=\"Market.svg\"\r\nContent-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;\r\nX-Nextjs-Cache: STALE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":589,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"379566eecf60cdefd875b37cd4375b26","sha1":"2e084043c775aa49e90458b6e97fbba5dc0ed443","sha256":"473245fe11c980e6a3a5ab6f625880c5f595b05551af11a9064781c099a42078","sha512":"1d78219dfc042102acc29e2ab1017f79cb7b5b291b694acb45da5c158f766d0264eab833ed58c6cc666c98fb36d69fefdc90bc0bc660fc176bf77ea07abbbecb","ssdeep":"","tlshash":"8ff0acf4576ca5c80deac931cf2935c93f2a90f8315c0585e15c8af0489046a7a84c64","first_seen":"2025-09-09T18:54:39.266026Z","last_seen":"2025-09-09T18:54:39.266026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/trade/spot?_rsc=1352e","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /trade/spot?_rsc=1352e HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(site)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nCache-Control: s-maxage=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5189,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (3123)","md5":"ca43706ceb31454dc5594b6a3092c23d","sha1":"2342f0f4ada4fb51efc66de34db73d2b1edde104","sha256":"d158d68a4b8bc4b4d97a04a22758ff58cd5834cffacf441a6ee721d3e8919fd1","sha512":"1f0ad31e8c30b4d34888f153579f0af5c8eada9fda465e4668fb01b53e35ea9d18a98de88f8c715d0615afd0cf688bccaff5937e83f754aa615613fc57a57530","ssdeep":"96:KMcNfcSnp+M6co69dnOsi6c7afUHDAz/kM/VouL2u4rnUv+jX:RSpDo6XRIAz/HNDhW","tlshash":"e6b1be270a09e97b6ebbc5a4406fdb5b928d883b23304df4c6ed5e2c075113a5b8b6d1","first_seen":"2025-09-09T18:54:39.267948Z","last_seen":"2025-09-09T18:54:39.267948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/image?url=%2Fimg%2Ficons%2FTrade.svg\u0026w=32\u0026q=75","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2Ficons%2FTrade.svg\u0026w=32\u0026q=75 HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 570\r\nConnection: keep-alive\r\nVary: Accept, Accept-Encoding\r\nCache-Control: public, max-age=60, must-revalidate\r\nETag: Vy8iMjNhLTE5OGNkNTlkN2QwIg\r\nContent-Disposition: attachment; filename=\"Trade.svg\"\r\nContent-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;\r\nX-Nextjs-Cache: STALE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":570,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"54066733baec7e5637267f66e5cc882a","sha1":"fef6672fa6c464ec1ce9c64d467cc86f029a914c","sha256":"e19d147984fc50d2bf4d1c14a5520eedf94458b6eb8391247e51bb887b249a70","sha512":"735fd50672a6aefba7e26298e09305399449493af671f8ecc9921a75d5b726955732eafa76388786bd8ef487aa045fcf1de18644d51fd52b6f566a91f2b349ae","ssdeep":"","tlshash":"a1f0f6b34bee520c4584e54c9fab272a6e8db0b563148016685fc6d0e0c714fd12f264","first_seen":"2025-09-09T18:54:39.270545Z","last_seen":"2025-09-09T18:54:39.270545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/66ec4792-946e5930f805266e.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/66ec4792-946e5930f805266e.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"c9b-19923fa9143\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3227,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3227), with no line terminators","md5":"c10436c31199faccae05e31a714a4c9d","sha1":"a892740a7597a2bda2d9f418686e8965d1ea1341","sha256":"2ec52a73312cdc0038d7b7f77aea3566b12cde47552e4543e01b2a5bb7955584","sha512":"4ae69707e0ea66d1a4bc464fe0243a4a1080165cef7496dcb5eadff62aff34aa0126fbbea855faa611ad6f8f4c46221b8e6be0c80d45f3a64b269dcf84290546","ssdeep":"","tlshash":"126132a2634c22fc5888c4688f57b05b213d72abb0fa14f14b9d8d48e1c31a5f01b6ab","first_seen":"2025-09-09T18:54:39.272822Z","last_seen":"2025-09-09T18:54:39.272822Z","times_seen":1,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/img/coins/SOL.svg","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /img/coins/SOL.svg HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 20 Aug 2025 19:11:47 GMT\r\nETag: W/\"6bc-198c8e4fd38\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1724,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf17c574e393c0904b88051d8198b617","sha1":"c55ad668e8209fa4417d414073fe090aff3c9c36","sha256":"dc4fcf2ef1606dff175b9f3f0d6a5f16295586a452b553325116130302b67af4","sha512":"17ae8f634df848eceff1b1466c78eb33fa8719de144aca5dd848f39553747350600e5add5569b45b034a8336a761dbc2f2b69932383daf2eb8c4ae0090e88326","ssdeep":"","tlshash":"6b314063f49cf966d800f3d4e969a83672ad54f7b7a4cf90c380fe192624dd0082dad2","first_seen":"2025-09-09T18:54:39.27537Z","last_seen":"2025-09-09T18:54:39.27537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-09T18:54:11.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:11 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nX-Powered-By: Next.js\r\nCache-Control: s-maxage=31536000\r\nETag: \"11zrwwk7jepqbz\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":34129,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34127), with no line terminators","md5":"dc1a36e4e4d868b329fc57526bb75cba","sha1":"56566704ff3efc50d97764c0bccec32f928a588f","sha256":"c42031ebc7a1910d0682e8239aa923fc2041a04fca719abd9908c600ceacf57d","sha512":"8c2d6b71d5299d40535e2fb85e4594ba08812451fab6d75868da7eafef75f270d979e7987c618d1cbdbe134043aec54d11b09dadea163eac9c42db12e02fee3a","ssdeep":"768:iezOJIm0bhwTMpk0SD40gOcdZzS9HSfWSDEa:2Im0bhwTv0SDqS9yfWSDD","tlshash":"15e2d8306101ed3f926799e8f2356f7e508fd25ace2b841ca3dc866117c2cb9de665c4","first_seen":"2025-09-09T18:54:39.277308Z","last_seen":"2025-09-09T18:54:39.277308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":89,"dns":12,"connect":20,"send":0,"wait":85,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/api/users/me","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /api/users/me HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 36\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: https://emirex.app\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nETag: W/\"24-HG/i8NbI0XsReqdpNWk/hnGYOsA\"\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9ec62272db757556aefbec27fdad8ac1","sha1":"1c6fe2f0d6c8d17b117aa76935693f8671983ac0","sha256":"879200f3ecc6569cf0d921603a9e738112d3772060f3da9cdb31d93b74c0afa2","sha512":"b3ecd09a3704f033d34766380097f3d84c5a5cf8dc0042ebee8e1e0a812e99c6a80a3136e9048e08a7e7a08fb3eca340f70ba9553589a70770faecd2516023cf","ssdeep":"","tlshash":"3d80000b88022e2ab3020a3a320be032800080aca28023338e888a8c0a838388203a00","first_seen":"2025-09-09T18:54:39.279084Z","last_seen":"2025-09-09T18:54:39.279084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/trade/page-c290591f34eae42f.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/app/trade/page-c290591f34eae42f.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"2962-19923fa9134\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10594,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10592), with no line terminators","md5":"b73c72a6b0b710f256bbfcf9c5010968","sha1":"1abace22e4785e0619fb0faf863ce33505048ba0","sha256":"4bac74b9ecf5d89f396f4d8e919ed991214561827da2555fc722a405cf27d1c3","sha512":"b606c903e1e76ba56c0cdf49062890f44a7565a0cab3fc71bd96feb579ac9d4ac2bf4f25df0f57669613eab58e4aef62e94bfeb675cf8e0ee927e544bfd251a6","ssdeep":"192:R/iYxuH9c6So267BJ89O/iH/566k7DvvlVme6:R/iuy9KQB69Tf566GDvdVa","tlshash":"88226694e352bf9cfa2644e4a91fc00d720e1f88db2f8875b1b93c1a16945c47b52f9d","first_seen":"2025-09-09T18:54:39.280795Z","last_seen":"2025-09-09T18:54:39.280795Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/5838-0fc4d2d6c247f045.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/5838-0fc4d2d6c247f045.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"1cf3d-19923fa914a\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118589,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0cf4aaa2d91e5ce8a8ae92be4363b5b6","sha1":"6f44a31c96d976c0b932975f5797c4a960a8a632","sha256":"6fd91b06bb06b947978b92fcc93be71e08a447821229b6872b0a5d3a5c10c497","sha512":"bc25eedbbf29a855a937a74000a479f8ba2bdd6f2e2f848d3264ff1301139e129edee3daf2bf17c29fd814e24911ce0d2dd38d6dbfc9c1d711d311b062135fcb","ssdeep":"1536:EgDag8T6Wj4tuF909ot9uNphzOBeMvx67dcAjfKZCP8IRCUMQSICxrVLw5:LSZp90WahzOBPJzu","tlshash":"7ac3f6e673517561d3cb51a9c4af0741b33a58d8201a803cb6bdedcb682058d62fbb7e","first_seen":"2025-09-09T18:54:39.282549Z","last_seen":"2025-09-09T18:54:39.282549Z","times_seen":1,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":303,"dns":0,"connect":0,"send":0,"wait":26,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/image?url=%2Fimg%2Ficons%2FPortfolio.svg\u0026w=32\u0026q=75","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2Ficons%2FPortfolio.svg\u0026w=32\u0026q=75 HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 781\r\nConnection: keep-alive\r\nVary: Accept, Accept-Encoding\r\nCache-Control: public, max-age=60, must-revalidate\r\nETag: Vy8iMzBkLTE5OGNkNTliODkwIg\r\nContent-Disposition: attachment; filename=\"Portfolio.svg\"\r\nContent-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;\r\nX-Nextjs-Cache: STALE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":781,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1883617f932c1826c41625a7e1ab6457","sha1":"a67e5ee57b3741daed2c1ecdab6a5fc3a26ec3e9","sha256":"262afaa1c06c01e426cac67afa18b6d15e3a9213022dde028e7cd796201446bc","sha512":"e2a90ab80f1fe1562ebcd2f644a263582d1254c12bd1761cac95326b62566e411c9d5302806e8a6580f1dc0b7feef073aac925c0d72b8bfd630f0fdbee1c8729","ssdeep":"","tlshash":"8c01bdf051efa1d6f1cb8f30ea7e1c5d6465703e2dc91ec050d199b028250fb0b99854","first_seen":"2025-09-09T18:54:39.284148Z","last_seen":"2025-09-09T18:54:39.284148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/image?url=%2Fimg%2Fgb.svg\u0026w=16\u0026q=75","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2Fgb.svg\u0026w=16\u0026q=75 HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept, Accept-Encoding\r\nCache-Control: public, max-age=30, must-revalidate\r\nETag: Vy8iNWNjLTE5ODVjOGJkNjQ4Ig\r\nContent-Disposition: attachment; filename=\"gb.svg\"\r\nContent-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;\r\nX-Nextjs-Cache: STALE\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1484,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df0ebd0f6a22e2df4860f599352e615a","sha1":"4532da6f2f3bd45b914b032937a4c9ae1b391761","sha256":"dd85f85e2a3df7caabc9290eb0b397fe65bf0a1edaad421f13958f8d88bb90a6","sha512":"0ab77a2b9621bbb070d0cfc65d25919275264885cc20aadcc6e643f7584971c2cf49ae8975b04d254f3df503a5f36b18bd3a8fd1f302ce4f7fe36273c4d6ee2c","ssdeep":"","tlshash":"033162c4032491ed416a4ba9ff26b0d9931c31fbfccad8cd8cae05a440abb9dc85f408","first_seen":"2024-08-19T21:59:03.814288Z","last_seen":"2026-07-19T11:40:18.423162Z","times_seen":255,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/2619-38012e79151e370a.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/2619-38012e79151e370a.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"1e6d-19923fa914d\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7789,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7789), with no line terminators","md5":"516f3cb49de60dd6a41bab407a170980","sha1":"bcbf74fadeeb5197ae421aa9cc7831e3320a16af","sha256":"ef541b7c81d2f249be6f2b980481122886deb80b0ab842f9c967d087c02be194","sha512":"a460384997a7793948361cdd0680e36b6bdc982b291ce0ce6cb22c75203a57bc6408ab252fb70c47887b78a8d53fa161d4cc7cb0f8b715af47bce0a47cb191b6","ssdeep":"192:hYOHCx4wMcGWgSaxTPKnMeoBqSgZc2c3GbjqSkT:hjiGwMcGWuTP8MFmorH","tlshash":"b6f1c9dab1e1f8e2836b1190443b100bf27e5db5181e9194f7a95ce6f9b042c91b2fa9","first_seen":"2025-09-08T17:30:11.398709Z","last_seen":"2026-08-03T16:55:55.525837Z","times_seen":798,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":304,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/8e1d74a4-03d49b958f7941d9.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/8e1d74a4-03d49b958f7941d9.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"5b5-19923fa9142\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1461,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1461), with no line terminators","md5":"b2beb4f5eb2cc639efe752632de18681","sha1":"eb553301987db147ede707d6e94812a42bb654dc","sha256":"56506b5f024a1114a0d0a604e1f033fc13a78eaedd89b7923e7b426e6cd3e8d6","sha512":"5241789badf2f045c589b71ebc3abbc1995854d3fc38c10eca6b712ed24e7fb770e88ca5ef26c2fb71bc40f050463b89fd44fbf0ee7ea08d5d71024cd6b7fd87","ssdeep":"","tlshash":"09310004513833e56dc946318a15580f24596e9e34fac4bcab28ca91915b7bdf9134ea","first_seen":"2025-09-09T18:54:39.288729Z","last_seen":"2025-09-09T18:54:39.288729Z","times_seen":1,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":311,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/f8025e75-d6f939abaabadb45.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/f8025e75-d6f939abaabadb45.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 965\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"3c5-19923fa9144\"\r\nVary: Accept-Encoding\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":965,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (965), with no line terminators","md5":"70448df5b7eb39369dadf5a1ee0fd2f8","sha1":"ba111ce4acc0d7de0f36bf21b55f62d27eeb8aab","sha256":"ff418e2c2b9c0f115b7d854282585f89ebcfbe93b322ddeb7ede697c0da006cf","sha512":"3283fd78bd3106feae4ecac88412616a7d5384ca8f6959fa74ef47a05386a915b06945de9599186bc0d2206d369ff241eca1589d80227f747ec973b386fa4628","ssdeep":"","tlshash":"4d11424a1b4c26bda8c5c4602713a4134759d7fea0feb4b59f2c60b4839340be9774db","first_seen":"2025-09-09T18:54:39.290486Z","last_seen":"2025-09-09T18:54:39.290486Z","times_seen":1,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":228,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/layout-ab5894527bcd19e8.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-ab5894527bcd19e8.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"167d6-19923fa911d\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92118,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60328), with no line terminators","md5":"7089e8fb3611ec7ef7102a9b0e7c0066","sha1":"6932f73a7e5596f7d704bfe7303c212373a1121c","sha256":"b5c02558cb190c8af4ca7628d23eda93909fae2cabd92d1404edcbb40f110e0e","sha512":"bc00b8475c21d4ac412b0a710fc72760d57615fbf13eb266f1b056bbfc0eb9a86494590f0d20034c0ff5df0e7cd070694627de39001c8931c219425954478636","ssdeep":"1536:1t1tyHXQHXMb8662Xs05ija3EL4KD8ZL5aE9BwgADDQDGST:eHXQHXMbbXs0AkELVoR5aEfDGST","tlshash":"a9934c4453923efd5b2202c864af611d731d29e9d75e88a4b5fcbc1d22dea80b1b7f48","first_seen":"2025-09-09T18:54:39.291753Z","last_seen":"2025-09-09T18:54:39.291753Z","times_seen":1,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":312,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/css/ea7d800c8a680295.css","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/css/ea7d800c8a680295.css HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nContent-Length: 631\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"277-19923fa913e\"\r\nVary: Accept-Encoding\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":631,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (631), with no line terminators","md5":"87f17a6c72e7d611fa52c90cafd7932c","sha1":"6e0710c323f561ec3239a5e28515d57031d5da52","sha256":"adb01c722051e4f4cb11d51a9d8814e94ea220e5a86c74138a602f5a78c47a69","sha512":"6aa6730637437ecff86d3bea67c606f2aa04af918de56c68045ea54cb6eba9c2a939ca0affc145738d1b5a0865768687cae2bb287159e7b2641f293d8a3c5443","ssdeep":"","tlshash":"8cf0d12612893721e41bcf2e49bafc4bd6a3f3629d730324c5b4d11cd79bec425014e9","first_seen":"2023-07-08T01:21:47Z","last_seen":"2026-08-06T17:09:32.524164Z","times_seen":682,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":131,"dns":1,"connect":23,"send":0,"wait":160,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/main-app-9cd083343aa1213c.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/main-app-9cd083343aa1213c.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 560\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"230-19923fa9117\"\r\nVary: Accept-Encoding\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":560,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"ff63b3636e16a32f06fcc9a73c703b44","sha1":"e6b851b48843a90e9fffeac0fa245e14e971ef93","sha256":"25b0c7d6549b268037714f51cf680277bbf2da03b3e02823b29b8f97119bf87e","sha512":"2b1c5d1160fa98357905355dc1cfa391eba4c2cde9f0be40d5f40e98f69df3b2f2844dc5962c1a891b6eb3499a5de36cbbf2a09253c940173d88ccba1467cde5","ssdeep":"","tlshash":"43f0f49a4f1cf52f5c26ad60fe97ace2285f4175302b4e647914eeb23c23bacd270409","first_seen":"2025-09-09T18:54:39.293821Z","last_seen":"2025-09-09T18:54:39.293821Z","times_seen":1,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":278,"dns":1,"connect":22,"send":0,"wait":23,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/api/markets/klines?symbols=WLDUSDT%2CENAUSDT%2CARKMUSDT\u0026interval=30m\u0026limit=48","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:13.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /api/markets/klines?symbols=WLDUSDT%2CENAUSDT%2CARKMUSDT\u0026interval=30m\u0026limit=48 HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, s-maxage=15, stale-while-revalidate=60\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":935,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f02d2d4a5152a7355a03408dc6ba0952","sha1":"925a559b45d7f0d18d8f6ac1e32e6b3431278ae2","sha256":"4705065a0eaa4226a509a0c08ef93fdb6bbc6993a112021b5ab384ea8323d68d","sha512":"d75872845d42f18246f5b9c34b8b0b1f840dfa70ba273839b43c2766f7422a4ceb2539739192ea71e5eb2fd03b392bb51e946f2a7d7c5e067b90ba08d65140f1","ssdeep":"","tlshash":"0211a70e573dd39e369518ac382d67e63bc5da09c99df000f05a1d15a206e3a122ef52","first_seen":"2025-09-09T18:54:39.295658Z","last_seen":"2025-09-09T18:54:39.295658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/4bd1b696-f785427dddbba9fb.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-f785427dddbba9fb.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"2a3dc-19923fa9147\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173020,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7040f9644360f35f2b988c55e8ce4072","sha1":"87ad12f2bc364390c191172a9a9af6ad70b8e07c","sha256":"51a7146e32f6a18a96676813fd791cd1b0265c675292acb31196720ca9e79726","sha512":"9b801d74b75a094a73a2155b3d73d5344ee74cbcd27070ea57dafed253f73410770fcc2e7e4436636c7eb680743e717978f7f80a736bf8d691e9f9b2b96e7748","ssdeep":"1536:eWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:S9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"def3f8ec3d99e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-08-29T10:45:07.929156Z","last_seen":"2026-08-08T07:15:31.626361Z","times_seen":3665,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":181,"dns":1,"connect":22,"send":0,"wait":120,"receive":28,"ssl":168},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/image?url=%2Fimg%2FMain.png\u0026w=750\u0026q=75","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2FMain.png\u0026w=750\u0026q=75 HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3626\r\nConnection: keep-alive\r\nVary: Accept\r\nCache-Control: public, max-age=60, must-revalidate\r\nETag: HnpvqLGWF5nBy62YrsPF4mu4lFTeIWPdM8_sngACstM\r\nContent-Disposition: attachment; filename=\"Main.webp\"\r\nContent-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;\r\nX-Nextjs-Cache: STALE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5bdc9cc82e9e0bb31ff5d203bd9058a8","sha1":"1a64348da3f60ba7d2f9e2e4b20abca398234866","sha256":"1e7a6fa8b1961799c1cbad98aec3c5e26bb89454de2163dd33cfec9e0002b2d3","sha512":"9c3017b78c3445b6c131b3050a9d73a74dae81f58a9e641cf315023782c64b3164c8fe0c2e2784140cd5910b6de248284489a00775dbb1e526b65862dd881d7e","ssdeep":"","tlshash":"03716c049313b13ee084aa549a6cccf8023e2ab3520303e490de3e2e2c391ab1b94839","first_seen":"2025-09-09T18:54:39.297553Z","last_seen":"2025-09-09T18:54:39.297553Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":331,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/assets?_rsc=1352e","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /assets?_rsc=1352e HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(site)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nCache-Control: s-maxage=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4693,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2734)","md5":"73744317eb720876254bcfb9d82b0dae","sha1":"cbea7fcd02ef6f160d3676f43841a6be4744c573","sha256":"3ffe4c95af86ee35af434c475ee4724dce34f86f4756f6488bb523bf80b494cb","sha512":"f4ffe6de4250e24ffef34549795184e5540db284f1c69d4fd228eaa938a8b7cde2bbcfa4c42e99521272dbaf8e3de420461a1ab912c84001926728aa0714273a","ssdeep":"96:KMcNfcSnpKNwCcsBnOxi6c7afUHDAz/kM/Vru4rhVv+jX:RSpnlsqRIAz/HNxW","tlshash":"f5a1ce3b4a08d97b6ebbc594406fdb5b928d893b13304df4c6ed5e2c035513a1b8b6d1","first_seen":"2025-09-09T18:54:39.298669Z","last_seen":"2025-09-09T18:54:39.298669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/795d4814-a0b7928aad0fea45.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/795d4814-a0b7928aad0fea45.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 364\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"16c-19923fa9144\"\r\nVary: Accept-Encoding\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":364,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (364), with no line terminators","md5":"943db92cfb3bd78c9106dc93f6d5122b","sha1":"f59f1c2ab7740fc945de709439fdf71c4dc6771f","sha256":"94ee004d17d854a074d1b5a58806353c029b43986e6e28644ae01f73cf903857","sha512":"dbace9f716a01d4b89e191907b569e24cd2b2f04934fc86db6399fef3cb84eb19df10221de5bc5fad330e8e3cfb50bf6fecff229e565946dbb05b14ed7bfb612","ssdeep":"","tlshash":"fbe02b8120652f967c954ca46061e41311ad27ef31ded4e85a60044081a165c5623cfb","first_seen":"2025-09-09T18:54:39.300442Z","last_seen":"2025-09-09T18:54:39.300442Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/css/97780bd0aa267b5f.css","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/css/97780bd0aa267b5f.css HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:11 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"1abf8-19923fa913d\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:11 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109560,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2d48aac21907d027b443be5ee67621e3","sha1":"84da26f90d909dd970113bf08eeb1471a5c13615","sha256":"f796c125df5a4faeeecfbd7d1b027b03664ba11d4b5cfce7ac33bedc2dd2a4a5","sha512":"86f7ae008640ae8787a5690dca911a95587e3f1e035435c76e93efd92e056d26877c08dae908599653520d0cc7b85fa34c8ccc5a0a749f42cc9061b12184f89d","ssdeep":"1536:vERqykdmSycNpkf7Kx3eL2dBEdFelvGvVMjTv5:vcqykdmSycNpkf7K8IBEdFelvGvVMj9","tlshash":"74b343b0a1b0e477bd13b1fd939cf40da50af1a6dd6a478cba51a10577e3bf61862e00","first_seen":"2025-09-09T18:54:39.30174Z","last_seen":"2025-09-09T18:54:39.30174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/(site)/page-269caf9ae75c85ca.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/app/(site)/page-269caf9ae75c85ca.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"7666-19923fa9121\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30310,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30308), with no line terminators","md5":"1c088fd2412a9893d34d072aa9733863","sha1":"f6434889ba516b84969ab71b98db4f83a3dc48ed","sha256":"0229620e14fe59bc3480916832fabd9b7e1ca8a8a40a1eb651c7d3d4307d9d4b","sha512":"0f4d74f8b3cd541ab5bf5439b6439d11b12dde27b9a626c3da82b9cd423154a3da210c00c68701966b08daf44f509340711fa6813541cb65ac51d06d3e00b30a","ssdeep":"384:3tkCF25CdrqsjxMYlnPqGQ/tQkcszWOML/2ZM1PxwlknSkdsWr+jOLJhK1:9Vc5U7MYlniGgQ/szWXPxqqbrWOLJ01","tlshash":"3bd2b360a152ee6cf6bb01e9a51e401db12e5f91de0f4c34f1b83c2626448d8b697b9e","first_seen":"2025-09-09T18:54:39.303123Z","last_seen":"2025-09-09T18:54:39.303123Z","times_seen":1,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":331,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/rewards?_rsc=1352e","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /rewards?_rsc=1352e HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(site)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4088,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2713)","md5":"0df5c7d88dcfab7e3afa221df15651ed","sha1":"4a72535508222eeea6d6e3f6e315dd908c267001","sha256":"82fb898a37cc989186c709bddc22cf73e916ec2de4838e5a6373e70f4bb3c0c2","sha512":"23eef423e35b1c590c67ae707d1af95ab4ea8bb18a95a3ef64c8223559f3ec3c71c2a8cec7c9f3a41633e53245db0808ebf1b4b223b131102ba36f889f595505","ssdeep":"","tlshash":"d281c03a4a09997f6ebb81e4406fd71b928d893b23700df5c69d5e2c076113a6b8b2d1","first_seen":"2025-09-09T18:54:39.304634Z","last_seen":"2025-09-09T18:54:39.304634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/earn/page-4d3f7328a24b8581.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/app/earn/page-4d3f7328a24b8581.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"75c4-19923fa912e\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30148,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30140), with no line terminators","md5":"e03a3ef39a2ddf7ac090b46151149502","sha1":"950fb430d4aa30135a2fb8c13f80f1c09915821b","sha256":"a78bfba1fe317e1be5520f5baf8fa14c10f324ab81c5ea79f4aab5ac3dd9d7fc","sha512":"5a443e76118b3ab9de5ea63cd63e3d086fc11c9e8630975a34b87bd10908a36e0be47978a43229d18c77d7822bd52a828dbc1108c89fd390e3276a1c5635959b","ssdeep":"384:XzjPe1IhL885Ue82e1/t+YVwU9ws5n2B2Q/DxN458LI0OI:DqK5UCa/tD+Ue8WDxNF/","tlshash":"4cd28251b552bfadf67b05e9a69e440c711f5f88ca0f8c78b0fc7c0a17458c8ba52b89","first_seen":"2025-09-09T18:54:39.306023Z","last_seen":"2025-09-09T18:54:39.306023Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/webpack-e526331b133ea150.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/webpack-e526331b133ea150.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"e32-19923fa9138\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3634,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3634), with no line terminators","md5":"a44c61df37b57acc22710a2d8b4c1e6a","sha1":"b22d05a419d914d18886e23515ae8c48c46c15da","sha256":"ae8652f045ab8ff4e59a850853c233ad262d31fe9b83f13d9ce556ae5358ed0b","sha512":"82f1f1b84303e7c59de1c95d83f87814466ce2e2429c2ca8c1e8d3c0a9db725279285dec21b2fb600539c03d35fa910af083b5954f08e39539bd85cc88e5aa2a","ssdeep":"","tlshash":"7371a6a53521eab557f10885487fc651f629103b151efcb0e71bd8f6b4649e20162ff3","first_seen":"2025-09-09T18:54:39.309388Z","last_seen":"2025-09-09T18:54:39.309388Z","times_seen":1,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":92,"dns":1,"connect":21,"send":0,"wait":145,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/5239-136a094e0b5448de.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/5239-136a094e0b5448de.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"3a46-19923fa9149\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14918,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14918), with no line terminators","md5":"78a4b93d1444c0f87ba9f23c6546adc4","sha1":"82b0d97d074f672f54231712acea2767fdaf8c47","sha256":"9875c55e6ff35fc524f6247bccadace95b3b741f2f4e2fa7c0db20215174f281","sha512":"225ddc9ee328b16c7c455ef6e8d7fc6d771a81aa6f256ed5e32f2204f25e451eb89d0abef02402400eace8bd054503b2c675a8a45d00e049cf963ead0d485f04","ssdeep":"192:yC4BeIA59d8/zIQJ5UaWA3L2BV9wrd9dMtFuD8avnP9GRFVYLJxM3buP8ww:54Yj/W/zzuaW6cV2ZjD5P8Ck368L","tlshash":"d5620a723695fce6639bc091c83f000df3756d71623ab18873ea8cc9a5a4584f0a2f76","first_seen":"2025-09-09T18:54:39.311884Z","last_seen":"2025-09-09T18:54:39.311884Z","times_seen":1,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/api/markets/klines?symbols=ETHUSDT%2CUSDCUSDT%2CBTCUSDT\u0026interval=30m\u0026limit=48","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:13.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /api/markets/klines?symbols=ETHUSDT%2CUSDCUSDT%2CBTCUSDT\u0026interval=30m\u0026limit=48 HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, s-maxage=15, stale-while-revalidate=60\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1216,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f60385cb29f013de9138232f9d3b274d","sha1":"7bbf832a5d7b01b97fdcd381bfbf61a25bc33ca3","sha256":"92263fbfe372b426ed92aee35f13e374716eba3c8a0a4d4ed4e03f6f6c3eb218","sha512":"38f29b3f5ba4e1fddbc5c030578be602dce528f37d177e60843e31cf97a4b150287853e8651397529f08abe3ebf816a537594d2f54c8a9a3bb12966789b93031","ssdeep":"","tlshash":"802147cc53844f58dec44eef35011add98914f95b8bdc1b0ea229d968dd1bb00ab489d","first_seen":"2025-09-09T18:54:39.314424Z","last_seen":"2025-09-09T18:54:39.314424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/img/coins/USDC.svg","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:14.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /img/coins/USDC.svg HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:14 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 21 Aug 2025 11:52:27 GMT\r\nETag: W/\"c32-198cc792078\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:14 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3122,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b9fc510c4416129f0877779f27ea886","sha1":"439091b75ee28c2e21a02d0f6e0fdbe32dc26da4","sha256":"0258d5ddc1f2e273a678fb759ece04e1907e78b8927b8231f8b99d9b535b6bb4","sha512":"76e6931b94ef912930eb32e70a54f99841298fcd18f54eba6841d9ea9574109aa1c8d792781f13c1204c2e7f9edaae2de7a4ba9d838a9309dba0aff6638cb26f","ssdeep":"","tlshash":"a55167f5c6d875d0ad07af00a81245367a6b34fe3f5edf894114eba46a140e8e9cccc0","first_seen":"2025-09-09T18:54:39.316594Z","last_seen":"2025-09-09T18:54:39.316594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/3923-98771f1e51080527.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/3923-98771f1e51080527.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"d00e-19923fa9155\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53262,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (53262), with no line terminators","md5":"1b1f5ec76ac41a145315fc100ab01a3c","sha1":"2eb7528bde8394570d707b5d24cb0f0a81a56a3c","sha256":"6f8af72a4f079e1e7b6c23c100220631168c836b655cd089376deb3923fe8feb","sha512":"b93d39d8c435e3a0cb4d8129d519fc16072daff5542a996544569220a3a1dff799c2fa50961c12a83e949ba0802e57b4bc9f24f02ae8478f88e7c570ada0ae9e","ssdeep":"768:FGttJslTck93sEnOHik0d+wG3CFOX9HXo5QYLJjwXFM:FGttep3OHik0cSOX+WkJkX6","tlshash":"1b332b95337b763643ee81c960b11104e73999991848280dfa78bfd7e491e89a3fbf31","first_seen":"2025-09-09T18:54:39.318636Z","last_seen":"2025-09-09T18:54:39.318636Z","times_seen":1,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/trade?_rsc=1352e","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /trade?_rsc=1352e HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(site)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nCache-Control: s-maxage=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4681,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2731)","md5":"3d78a73ec45846a5469d3dc7f376929c","sha1":"bd736edd7857eee42e3406d9a89517d550eaf0df","sha256":"beb6db24fbbfacdcbd51a581c97458b1991978a16a655a3e6ca0587925d42fbc","sha512":"636fd846b27dfa05e4a605922a55bf656055ea3d81b6c0f28fe395094fce395bdfc7aa24152d41c1032e2737b71ab3c620c6ab530034f291c8554b8aec3e7082","ssdeep":"96:KMcNfcSnpFMxco6DnOFi6c7afUHDAz/kM/Vou4rhVv+jX:RSpfo6wRIAz/HN8W","tlshash":"27a1e03b4a09d97b6ebbc594505fdb1b928e883b23300df5c6ed5e2c035513a2b8b6d1","first_seen":"2025-09-09T18:54:39.320932Z","last_seen":"2025-09-09T18:54:39.320932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/api/markets/summary?tab=gainers\u0026offset=0\u0026limit=3\u0026minQuoteVolume=80000000","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /api/markets/summary?tab=gainers\u0026offset=0\u0026limit=3\u0026minQuoteVolume=80000000 HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: no-store\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dde94efb054462e2c1bab41df38ffb0f","sha1":"6b99e8de37a40f5f72efc7416313c84c97e686bf","sha256":"84a61c9cfe5101bbef73cdb018b3ac35f04b736945e81420666f692f39364d3c","sha512":"ceb48fa55ca8907c4fd79015b0308f245b0279d1b36880a5f6edeaeadc3d9a23c3ed2c702301bf1612e1971af74d9246976dde204ab4c5dd74efc148fb8a0e05","ssdeep":"","tlshash":"62d0a702232c8b77e18470879cc33d5491a9490151c74d0d54c9058e03c9eca320b331","first_seen":"2025-09-09T18:54:39.32298Z","last_seen":"2025-09-09T18:54:39.32298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/api/markets/klines?symbols=ETHUSDT%2CUSDCUSDT%2CBTCUSDT\u0026interval=30m\u0026limit=48","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:13.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /api/markets/klines?symbols=ETHUSDT%2CUSDCUSDT%2CBTCUSDT\u0026interval=30m\u0026limit=48 HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: public, s-maxage=15, stale-while-revalidate=60\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1216,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f60385cb29f013de9138232f9d3b274d","sha1":"7bbf832a5d7b01b97fdcd381bfbf61a25bc33ca3","sha256":"92263fbfe372b426ed92aee35f13e374716eba3c8a0a4d4ed4e03f6f6c3eb218","sha512":"38f29b3f5ba4e1fddbc5c030578be602dce528f37d177e60843e31cf97a4b150287853e8651397529f08abe3ebf816a537594d2f54c8a9a3bb12966789b93031","ssdeep":"","tlshash":"802147cc53844f58dec44eef35011add98914f95b8bdc1b0ea229d968dd1bb00ab489d","first_seen":"2025-09-09T18:54:39.314424Z","last_seen":"2025-09-09T18:54:39.314424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/8809-818b71ba4e291ecb.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/8809-818b71ba4e291ecb.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"5128-19923fa9151\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20776,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20776), with no line terminators","md5":"84fded90fd18756ce4b1e5afe93c71ab","sha1":"1b40f93851d13bcd60503f1b18d4a57167f0db40","sha256":"d7890a259fe1687fa0d58d0e5ba93829c8da8364910e8f1d5e56b341f853b738","sha512":"ba3cdac0281f4e51fffe7c51ec203e36138485325bcc4bb643aeea6987279f4bdfc29961e21802d8601e180dcb4945130cefb198b8171101d257f0c13d3aeba9","ssdeep":"384:R3JL2phyAOgJg1pMpiS5GqRN2Av+6Pa4neM:IhB3ufzS5GHRdM","tlshash":"bc92c6d87381b535a3cb25a5805f540ee33e7a25140f4941f269e8d83a385ade2b3f7e","first_seen":"2025-09-09T18:54:39.326379Z","last_seen":"2025-09-09T18:54:39.326379Z","times_seen":1,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":327,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/icon.svg","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nX-Powered-By: Next.js\r\nETag: \"crfsnhdg2lak7\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":13689,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13687), with no line terminators","md5":"dd091debef81419b8f96c159c4f9b33a","sha1":"0455328dc6fd0d8069ba30b84e69730c6406900d","sha256":"22a4eeef8fbed4f9aa9f6ea8526abac4905dc57a49f0d441f9cd68f63152e0d6","sha512":"05f919c951591fc0f8867249c66f7b83e03d31a860b51fa54784929ef21d1cbb1a8f95b481bf44a9539cf80bcf45eb120d43b21c7bad6dcbd45fa2267cfca603","ssdeep":"192:RGUO0Fn3YO3d5GCWphMCh1e3WSzHkZh7y6Y3SFRKsLMgnqzcpm/CEA:RLOOIm0bcWTLfWSDr1BJ","tlshash":"3652a725d508de1f9937dddc513e7e39508ac57bca788938968cce64178287b6ba3cc0","first_seen":"2025-09-09T18:54:39.329904Z","last_seen":"2025-09-09T18:54:39.329904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/9829-1d93d6e89556abfa.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/9829-1d93d6e89556abfa.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"9e96-19923fa914e\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40598,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40598), with no line terminators","md5":"f041e437adf38447044b9595f34e0823","sha1":"5c4270cc4cf7d02596af252c0c1f161cef7e3a0e","sha256":"d78d8555e093ce67f63f0f9f5c3df37c6c5209839d2c69a8cdb7da7cd446110b","sha512":"15f06b00df4257bfb7cc2beb4c1c95cb13029be463a0362785ad28385f00e75d59fd0698f823cfbbe2e17a8555c00689c2aed91bf2de1c6c2f8e2de441122a1f","ssdeep":"384:7/mz48FmfuNhuEakCyTvpzWNy1SAITSGwnCLSNCcX4U8b+hyWSdQcrnO/AxwXNRw:7/msuOyaTSGwcU4UThyWVOun1DKt5","tlshash":"9403f8c5b321a06243d691a384b50203f32999991806455cfb6ceeffa97cec971f6f72","first_seen":"2025-09-09T18:54:39.332255Z","last_seen":"2026-07-22T15:01:08.117964Z","times_seen":14,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":303,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/api/markets/cards","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /api/markets/cards HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: no-store\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1551,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cca8421710f96cacece03229e6a99278","sha1":"042d5ef553564caf8f4b93b0cb4fbe39e31a4336","sha256":"f1a1ab683be41a736d0056e5ed1e36fe80e99712ab5a0a666bab9a160f7f8e16","sha512":"f8cb7e280634763e37f93b4990fcae7cb82cc6d6eaad3f55b38fb4640c374d7a447aa90941281e2c776745c9a2b382a21faad0e36f750b75adfe668a310f6878","ssdeep":"","tlshash":"a231cdb453930f6c9ac40995f5102d9de8e21c6658fda0ecef23e6a78d813f005b4cc6","first_seen":"2025-09-09T18:54:39.333832Z","last_seen":"2025-09-09T18:54:39.333832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/4704-ca0b2f6c2105ab3e.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/4704-ca0b2f6c2105ab3e.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"1052-19923fa9149\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4178), with no line terminators","md5":"73cf7d0798254592af9bd3637fbf672a","sha1":"2ca30c3540938457bed3885e5611524ecf5bf37b","sha256":"c244a3e50432ca080d6dde87aaeb12669ff1e8510843ade4fbc9ce5cd18d080f","sha512":"2bae905e5d613567bc3e5824561683da27cc7d76fc9e0e963b09de483c806cdaaa324c1e3032da8609f313894e3a6bd90fa8331f100ba0bbd1097596bb3f80cb","ssdeep":"96:tHeQepY0XB9OMC3pHlRO/Fz6SBuBj/DBLjNCK5O0j:t+HpgtlRsp6SBuBjDBL0KH","tlshash":"1f8165ad74d1f49057ab10f2447b8419f3796ca62c0c91a0d7f189ca78f026e96b3f1b","first_seen":"2025-09-09T18:54:39.335323Z","last_seen":"2025-09-09T18:54:39.335323Z","times_seen":1,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/9267-f1afd135ccda434b.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/9267-f1afd135ccda434b.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"4b11-19923fa9149\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19217,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19217), with no line terminators","md5":"6eb5774dd8b2c2a7a7016fa77f3628c3","sha1":"caac3a98e78e30143b4e4d9852b389bf73930613","sha256":"cdd5dd0ba0e3e649f2b2f4b2a7ce2dfcb4b7930258bcec59a8218b35f04cf382","sha512":"0ec5623a069bd7fabc1d9ee268467d2d5340e55133b9a174ee1fde921a81e0e06bdb4eeb4ada36e334cd7f2ed7e9a06367ec3a9ba54f456d01e0b167d5b5adb2","ssdeep":"192:3FKB5g9DRu40LvMo0s1AzzuE8wGcBzPfpS5MEYsrFH9SoQHnb3RkjaAZhiWD+9w1:1IghRs5UuTOzPAbHv8WD+usBvixos","tlshash":"6e82d6ea7792f07267ba56e7c03f0056f27918b9245d4000f355d4fa38b049da6abf3a","first_seen":"2025-09-09T18:54:39.337188Z","last_seen":"2025-09-09T18:54:39.337188Z","times_seen":1,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":278,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/img/coins/ETH.svg","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /img/coins/ETH.svg HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 20 Aug 2025 19:11:47 GMT\r\nETag: W/\"b9d-198c8e4fd38\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2973,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b91fad47cdb08c6511eb9d431613d2d","sha1":"e079a2e4568125b01b04710fb12e47a01ecf3151","sha256":"3926bd9eca8b9ae8fe2c8881e0405c94ff829e9d279b74ee76211ba676e934c5","sha512":"11a095edd41f9446019389a7759849377da1ece0ae7b8edd2664306574fbe4862cd016f93b6e0a8e06ffce624d83a5c7a2f2666fd1e45fcac95a60638965ae5e","ssdeep":"","tlshash":"52510bebb1c82fd1d603e7f4985ab6a932aa34bb3b9183448550adc3e93509d4d4cd8c","first_seen":"2025-09-09T18:54:39.339166Z","last_seen":"2025-09-09T18:54:39.339166Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"stream.binance.com:9443/stream?streams=aptusdt@ticker/bnbusdt@ticker/btcusdt@ticker/dogeusdt@ticker/ethusdt@ticker/shibusdt@ticker/solusdt@ticker/xrpusdt@ticker","fqdn":"stream.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.112.120.232","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /stream?streams=aptusdt@ticker/bnbusdt@ticker/btcusdt@ticker/dogeusdt@ticker/ethusdt@ticker/shibusdt@ticker/solusdt@ticker/xrpusdt@ticker HTTP/1.1\r\nHost: stream.binance.com:9443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://emirex.app\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0oJwIG+YaiKJHSEQ7W2osQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 09 Sep 2025 18:54:14 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Tlgy3XWDE+uPawPfKsvCxhoC4zA=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T10:24:32.173696Z","times_seen":17777360,"resource_available":true,"data":null}},"time_used":2727,"timings":{"blocked":-1,"dns":831,"connect":1095,"send":0,"wait":265,"receive":0,"ssl":1357},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/5061-e6c2d211f3f203c1.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/5061-e6c2d211f3f203c1.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"6238-19923fa9156\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25124), with no line terminators","md5":"6933017fc43b6d2519d929c7d442ab39","sha1":"d63973f3a887c53f22edf89c3df705f99b43c779","sha256":"4a27af75f50a9a70fbe5679d60ae873636831690fdd1e694b4f8f890acdb43e0","sha512":"dd28757c9987ee4b0e2263d2997bb60e634544b2f4ad70c35b863a3e21ef5582b00c55ca3a2ae1342459f493b215cb416b3594675716b21bbbe3dda67bda75c2","ssdeep":"768:6KX//MhIkd5fj63Usv/XjLsad+5sLgQAn3CSoik6d4qaId311H+A+0b:6KXnMhIkd5fj63Iad+5s8v3XiO4y","tlshash":"30b2d924b253f65daf7f1198a06d404da21e5b0add1fcc70f3f86c0b125a4c87ae2b59","first_seen":"2025-09-09T18:54:39.342239Z","last_seen":"2025-09-09T18:54:39.342239Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/4274-6331106e47a41e2e.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/4274-6331106e47a41e2e.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"1048-19923fa9149\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4168,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4164), with no line terminators","md5":"4df20faf0de167ed415d7e7d9bd67166","sha1":"150cdf99ad7fd106366d9eeb233a8c06a3661f7f","sha256":"55328d3edfdabcdb9b860a6d96d2fa8546c03f723952f60db618f4637565b78f","sha512":"9deeb6d457b156f2169e0018edfc937c0b7d85a5fee5075237ff365305a27c46fb734b4ab6d563ca09cddc3712ee8ce5e122ac394fc7cf5196183861a0dca25f","ssdeep":"96:udMYRwLpHjyRNE5YF0TPZHbKzbxmblrpq6/b+kJD4PyanDMidlVRGVJC/Y:JOSMAPx1bC6zdanDMidHRTY","tlshash":"c481d7ad21a6f42ae667410229261514622e967c2d8dc47dfbb8ad0f00d60c427e7ebe","first_seen":"2025-09-09T18:54:39.343972Z","last_seen":"2026-01-13T10:45:47.167776Z","times_seen":2,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":294,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/30a37ab2-39774dc769517f98.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/30a37ab2-39774dc769517f98.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 362\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"16a-19923fa9143\"\r\nVary: Accept-Encoding\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":362,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (362), with no line terminators","md5":"b18dd72785ba085fc97843e6a2563f7c","sha1":"9e7fc3ede47af7c4de1fb706a039d9f31b1b0ca9","sha256":"2fee631aa12d845980623b207ee144189b58d1d9e53a34fee06d51a2a7481cb7","sha512":"a37decec4286d65062294cb6781ea1037049725c9034108687929c0f4ca5d0f1dca621b3aa6c748e0d359bb5958fc5397cc24dc7d09233d335baa96622aa3ba3","ssdeep":"","tlshash":"2be0688b61947b546e4749c494e328b357bf352e799ed4fdcf614c5404a147c41238af","first_seen":"2025-09-09T18:54:39.34568Z","last_seen":"2025-09-09T18:54:39.34568Z","times_seen":1,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":325,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/api/markets/summary?tab=hot\u0026offset=0\u0026limit=3\u0026minQuoteVolume=80000000","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /api/markets/summary?tab=hot\u0026offset=0\u0026limit=3\u0026minQuoteVolume=80000000 HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: no-store\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a60183a2566abdc9715b09d8d4bce4b7","sha1":"5d4ce498470d29bc15fdf48e04288948fc7bae93","sha256":"c0808a24fe37100e3e6137b11ffbb65107baf3032c40b54a1dadd06032f33695","sha512":"46c2cb61b06ff0b1fa4c182bfc67f05dc437ba1fb1d6d88a0cedcb3d27c199bead7d9f3e311ccddceb3b8c3f1fac98d6916c8292ae117f74d113fd56a6ee7ccc","ssdeep":"","tlshash":"78d0a926136c4bbae048b2c3fcc72750e36aa80059c79c8ad4ee048e43c9ed13016331","first_seen":"2025-09-09T18:54:39.347061Z","last_seen":"2025-09-09T18:54:39.347061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/1371-06715e27e428eedc.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/1371-06715e27e428eedc.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"2e17-19923fa9157\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11799,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11785), with no line terminators","md5":"6c97ca1bb9e628c6ba2dc936ca1d1c56","sha1":"6ebe8b3a94164d9e3bea2f82caa82d4cd2f87fa3","sha256":"21e888b78e47cf3637a62b65d1222582b7f41c5a1d2655f8bc72813c82c961ca","sha512":"cbb3c1fcd10737c2e00f270863852e6ed786cd3a906233e8dbf71030dbdd85865f4ffca251057fc3e0f68854aa6efa3edae68dc70b3d6eba09ed27eec6154476","ssdeep":"192:Od9hdO8lKbCKvb56f0ZEovl8mePMMgM4dLdYlBQ8xLb0nkO:OXhdrKmKTsf0P+PMMgM4dLdYH0n5","tlshash":"cf325305f016faecf63a81e9965d452c622e2b88ca0f8d74f17c3c662944cd87797b8d","first_seen":"2025-09-09T18:54:39.348511Z","last_seen":"2025-09-09T18:54:39.348511Z","times_seen":1,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/markets/page-492676949abd27a7.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/app/markets/page-492676949abd27a7.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"4f44-19923fa9131\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20292,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20289), with no line terminators","md5":"9e3a8c250810550f4f48479e0f6bf1e4","sha1":"13048fb6965e9b1c5c0542ff5bd60bd573afdeb3","sha256":"2cf0b2ebf00275f5b7ed220653c1f1fd12629aaf93522c535f985eb9ad9720f0","sha512":"7888e378d760076862d38cf3120f69337eb4a94e83195b4dab443a91ebfd7669d53ea535c46df78daa57596c2740ee2478c10c685d3ad5bd6c9d1a6cb9aea104","ssdeep":"384:u32ViXYUIVEY00GH202GHP0GhCfP2PeGTPGdShUQexKg:JZ6Yvb02kP0gCfP2PeOPkShHg","tlshash":"2a92a7589302eb2ce17a01c6dd89d10cb12d2fc2d76b4624f5ba2c522714ebde76af4d","first_seen":"2025-09-09T18:54:39.349938Z","last_seen":"2025-09-09T18:54:39.349938Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/1255-20045df290cc858c.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/1255-20045df290cc858c.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"29e56-19923fa914f\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171606,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5ebf48dd8ad0f1ae301fbe6141c6c484","sha1":"509f96793cb1f17481896dd8f11317cf38af12c2","sha256":"7ce4e53d637414e3ad78771b3d9f14be601c8010d69d336f9f78c7c0a799352f","sha512":"5cd10a371c53bb0d06c2e2d439e8e851c7cd875afcdb5327308ffc70d244f13d697fb27a6a625f13fa6d7233a5350c56030ebc959af518aec7878cea35a356be","ssdeep":"1536:7h7TN+Izz+cHr6U5eHM0dQ/7vyBPo7ecq0MEsoMmyu9ym0OZp+ureDJzQci:NTN+UrFJ0uuwF5U+Zp7reD5Li","tlshash":"f2f3c9b676d0f8d107a780e5843b400af3295c3b146f74a0a3e6dcd975605dea1b3faa","first_seen":"2025-08-29T10:45:07.922534Z","last_seen":"2025-11-24T04:50:56.225415Z","times_seen":6,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":239,"dns":1,"connect":25,"send":0,"wait":63,"receive":17,"ssl":228},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/referral?_rsc=1352e","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /referral?_rsc=1352e HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(site)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nCache-Control: s-maxage=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4501,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2740)","md5":"513d67b9e90fe46389cb1f414816ea14","sha1":"1e0c836f12d413ca6aa4e136288e1798fd8ac855","sha256":"5e85c6d8eb36405aaadc4bfed09f9179fb144791f56c4b9c42b6f694e8414bc8","sha512":"a2a34eb355d8aacf2ccd0659671e1362d55409673eda50d2d22599ad73a7ca9b54da3fc69ac831c4283049836e2e4bea81ab53def680f182e08bb16d8b9bcd58","ssdeep":"96:KMcNfcSnpfMxanOxTi6c7afUHDAz/kM/VLu4rhVv+jX:RSpWNRIAz/HNRW","tlshash":"9491d23b4a09d97b6ebbc194506fd71b928d893b23300df5c6ed5e2c075513a2b8b2d1","first_seen":"2025-09-09T18:54:39.353066Z","last_seen":"2025-09-09T18:54:39.353066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/img/coins/BTC.svg","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /img/coins/BTC.svg HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 20 Aug 2025 19:00:49 GMT\r\nETag: W/\"7db-198c8daf2e8\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2011,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66addc4c1cbc37c7be25cb34cc360804","sha1":"e7626fa3476f15bc6402b14cbb6f26ebcbc200dd","sha256":"cae89d474b703cea50ab8907ff8251bd7d9786e4deb7b5586c0d54e023f556a1","sha512":"50a650c64ba00b92528cdbeac38694d64ad99bc798cdbfb5fd7fc0b771b084e5e39644b8a1974ac1ae2595b76ee4195da148a06429ef05b6190ec50feb67d07e","ssdeep":"","tlshash":"0241c6f067b4c3ccf44070fed933a0e06e7224d8a2226838c7e11e08a0675768f668e3","first_seen":"2025-09-09T18:54:39.354527Z","last_seen":"2025-09-09T18:54:39.354527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/img/coins/XRP.svg","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /img/coins/XRP.svg HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 799\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 20 Aug 2025 21:09:35 GMT\r\nETag: W/\"31f-198c950d698\"\r\nVary: Accept-Encoding\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":799,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57d20e8a051d8b8b32360ca2572d9a27","sha1":"f3d35e50a70f6b7d5f52757260e667667808e715","sha256":"5e9211d26c0e5add80e89c9ec5745aa8e446343013fc27fd300dd2419ca942c0","sha512":"99c07528d95d79c5d10ea9325930fc3bd09a7369a3ae751cfcd15d2d019d6d50ada4626f3fe4a9e57b637cebf56599147bed490b550b0f0dfd82d31f583c14ca","ssdeep":"","tlshash":"5d01f15c071c63d0e449f2126b19a45ead5761f3954b44f9c3022a5ee5848efbc6c9d4","first_seen":"2025-09-09T18:54:39.355743Z","last_seen":"2025-09-09T18:54:39.355743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/markets?_rsc=1352e","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /markets?_rsc=1352e HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(site)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nCache-Control: s-maxage=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4449,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2737)","md5":"160f648e8f1622c933e251d8b9217436","sha1":"596d0f58f59ce6b4548fe10c882a4e608e110cc2","sha256":"551d542f891b654ebcf32fbf498b309193d3b3c6147c599c5b9f8215093b7fa7","sha512":"3d2c328a81966720e30a629fa40cb76e34bf8f85283380e17adb6a369f7b578404c4d9bbffcf4abf6dcfef3b581f43ff955e4e4bf6610d556e26b76ae8bd780d","ssdeep":"96:KMcNfcSnphdS/nOZi6c7afUHDAz/kM/Vzu4rhVv+jX:RSphdS4RIAz/HNpW","tlshash":"2c91e0370a08dd7b6ebb8294406fdb1b928d893b23700df5c6ed5e2c075513a6b8b6d1","first_seen":"2025-09-09T18:54:39.357003Z","last_seen":"2025-09-09T18:54:39.357003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/api/markets/summary?tab=trending\u0026offset=0\u0026limit=3\u0026minQuoteVolume=80000000","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /api/markets/summary?tab=trending\u0026offset=0\u0026limit=3\u0026minQuoteVolume=80000000 HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emirex.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncache-control: no-store\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a60183a2566abdc9715b09d8d4bce4b7","sha1":"5d4ce498470d29bc15fdf48e04288948fc7bae93","sha256":"c0808a24fe37100e3e6137b11ffbb65107baf3032c40b54a1dadd06032f33695","sha512":"46c2cb61b06ff0b1fa4c182bfc67f05dc437ba1fb1d6d88a0cedcb3d27c199bead7d9f3e311ccddceb3b8c3f1fac98d6916c8292ae117f74d113fd56a6ee7ccc","ssdeep":"","tlshash":"78d0a926136c4bbae048b2c3fcc72750e36aa80059c79c8ad4ee048e43c9ed13016331","first_seen":"2025-09-09T18:54:39.347061Z","last_seen":"2025-09-09T18:54:39.347061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1084,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":1075,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/5828-0c559b8df123a36b.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/5828-0c559b8df123a36b.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"2143-19923fa914e\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8515,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8515), with no line terminators","md5":"d2a145e0e34e45e6cec1ce5c16a2af62","sha1":"1dd4ac3192980e5a0a58883fe1c38b12c35fb169","sha256":"f7f0991d3e94b207c3e008a04c3b74f7bbc885814b54b15db629a5ac3a89844e","sha512":"671acc539d3241ebbd2c1ba1d102c19ab29dcace18e9bfa640d65453728cc4f53a82157e9ad1855dad90e4f784b1742e58fbd6706a237ffb0077a2b76b4755e5","ssdeep":"192:YY5BjAjGXgB2eITzpzaI7WmW8DB2kVkF7FEmmoq1nwSh+NWdp:Y+Bjx19W+DB2ekR6FP1nwShcWdp","tlshash":"9702c67673d1bcb6634bc08d882b0009f27e5a3c261e5464b36e6ca967404d8b2e3fd6","first_seen":"2025-09-09T18:54:39.358373Z","last_seen":"2025-09-09T18:54:39.358373Z","times_seen":1,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/53c13509-78df5fb8e2353a6a.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/53c13509-78df5fb8e2353a6a.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"20ca-19923fa9141\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8394,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8394), with no line terminators","md5":"f215888823bd3aa26ebc5f7952067cb6","sha1":"7d85c0c16e685cd64ea0dc4701340b52ef948a42","sha256":"16194f060efa11647198942ca8fbf764238677b4b59b6aedbbf14036e00240ed","sha512":"b4ab5068e2dc0d4888b19547357e6f5e066a329ad2cd5a90acf413756bf3d7f2b7b4cb04182823ff774a97d6c2f444e3fbb6db7430b3524bcdfe35901e4c0fe7","ssdeep":"192:yPgsMSwx975xmry1zcIHdIv7SFUgpDLastcg:EgsF05xmrFIWv7SeeDLastcg","tlshash":"9c02555dd02862bc9e854370856274b11a9c19df31d9c4bcbae488a073a319cf6bbcdf","first_seen":"2025-09-09T18:54:39.35999Z","last_seen":"2025-09-09T18:54:39.35999Z","times_seen":1,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/eec3d76d-fd16e5e20feca3d2.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:11.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/eec3d76d-fd16e5e20feca3d2.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 723\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"2d3-19923fa9144\"\r\nVary: Accept-Encoding\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":723,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (723), with no line terminators","md5":"1a022435211eb398be877b794103cd21","sha1":"922dd140f33d0ead6867b5b26bc5d0262e571c54","sha256":"ba5dc37c86dfd3f9872280e03d2708ce0654f1597528eeb6826a51fd019e0a39","sha512":"a0c7734fe5c8b9d22af8d3aa83eab1b4497688a0f645a8fd03e392285e4bf07d8118971ced8d4ebc1e3b8cf12e6a5e0e0bbedc46c7acb92c4e8fbc25a493aaf2","ssdeep":"","tlshash":"ff0145a9120cb65f348709a407b29436ab7d190b31afe0f44a5fd6601043488e3278ef","first_seen":"2025-09-09T18:54:39.361518Z","last_seen":"2025-09-09T18:54:39.361518Z","times_seen":1,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":325,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/app/trade/spot/page-5a6b4c6c558a2434.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/app/trade/spot/page-5a6b4c6c558a2434.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"1758-19923fa9136\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5976,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5976), with no line terminators","md5":"7c5d7a8d680943f3d97f6e77d7a34aeb","sha1":"70783afea0a32a694627fd3ddca8651ee88e8351","sha256":"e14e389342eaa73d837186efc412844c7850147a324ae9d37a05b74c3871ed9a","sha512":"378b5abba54bd04ebd7ce5ef9a79f5de556635f29dc56c8f2b202006b7d809082b552fa65631fcff9ab463d603de01455de458511616a9347517fa2ef3e697d5","ssdeep":"96:L8G7IIt26S/mrxEsKwf3KqWE9x3OlzJ+nf1xxcZMT/6ufP6:L8oA6bqsFfaqnNOIfj7rH6","tlshash":"90c1ca95e3127d7dbe6908dca65f800ca10e1d1cc72f842ab2bd3c5d2295d8876d1fad","first_seen":"2025-09-09T18:54:39.362918Z","last_seen":"2025-09-09T18:54:39.362918Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emirex.app/_next/static/chunks/5936-0b30fdd42348c73f.js","fqdn":"emirex.app","domain":"emirex.app","tld":"app"},"ip":{"addr":"45.11.229.115","port":443,"asn":58087,"as":"Florian Kolb","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emirex.app/","date":"2025-09-09T18:54:12.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emirex.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 15:20:40 GMT","end":"Thu, 04 Dec 2025 15:20:39 GMT"},"fingerprint":{"sha1":"AE:AB:35:5C:D1:FB:4E:00:AE:9F:18:F9:A5:7B:B3:83:E2:FC:14:BD","sha256":"B4:1D:48:8F:C6:D1:B1:B6:59:12:F4:7D:21:1B:E6:1A:3C:0C:DB:5E:D2:80:60:7C:B2:1F:4E:39:41:53:C6:F9"}}},"request":{"raw":"GET /_next/static/chunks/5936-0b30fdd42348c73f.js HTTP/1.1\r\nHost: emirex.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emirex.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 09 Sep 2025 18:54:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 07 Sep 2025 11:40:47 GMT\r\nETag: W/\"4290-19923fa9156\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nExpires: Thu, 09 Oct 2025 18:54:12 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17040,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17039), with no line terminators","md5":"1e104d113eed914e16d3f2293925115f","sha1":"eb95d23b812e729bb98f190e326739cbe8e9acdd","sha256":"e1e297af49b7714349bd1deb12dd0991452a326f82d7e9cf5f38c7919efe4cba","sha512":"3fbd4c7cf5956c3f2468f947d707358967b910df405a26f43da1b8ba836c565fd13ddaa4d4670fb9a2cf77fb15752ae45e5826c245c87756ad6d03975ab69933","ssdeep":"384:kyH+02mFKCd85J0znsHXMce2N68teBA5Yn3QuCYXzU4JKzYqk/:zHhFKCd85J0znsHXMe68gBVgfEzU48zU","tlshash":"a372d785f152fa7546e762d2442f220af23a2628300dc49cf6bcdde469b580be577f36","first_seen":"2025-09-09T18:54:39.364306Z","last_seen":"2025-09-09T18:54:39.364306Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"emirex.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}