{"report_id":"44b1fad6-0cbf-421b-92da-392a1b6bfd1b","version":6,"status":"done","tags":[],"date":"2026-04-28T13:46:09Z","url":{"schema":"http","addr":"primexbtes.xyz","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"172.67.162.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"title":"PrimeXBT","dom":{"size":39187,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (37266)","md5":"1762fa523cd2554ec6bf926423eff251","sha1":"8bacdac7adfe57e0c142c8cf0eb608fc18f176ee","sha256":"f29c708331fb99437a97e7b63db6d611c3f672cab58562445ad1a46f92a84e97","sha512":"81f3797f78da2424c3c47359171b03d183cc0ade5d21ab9c6977d3e7dd52825380b4130111354334e911f5e91a9d841bdd1a5f266bb19acf95d4c38570106da8","ssdeep":"768:tsRD1YFWKhv755Ir3CJAtLySXPgoVWtHXd:tsrUWKhv755IbByjog9d","tlshash":"fe037474a425547b02a784c0f161bf8e7997f30fc10a856a3bfc428a9fd7db4a8395b1","dom_hash":"domhash3af848aa49dc5900fe642ed566b4c7a1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"primexbtes.xyz","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"172.67.162.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T13:46:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":16,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:50Z","timestamp":1777383950,"ip_dst":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":41504,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:50.663579+0000\",\"flow_id\":931401139303764,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41504,\"dest_ip\":\"47.79.48.185\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"btse1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-28T13:45:49.996692+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:50Z","timestamp":1777383950,"ip_dst":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":41494,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:50.663555+0000\",\"flow_id\":242243571889228,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41494,\"dest_ip\":\"47.79.48.185\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"btse1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":903,\"bytes_toclient\":5965,\"start\":\"2026-04-28T13:45:49.996428+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:50Z","timestamp":1777383950,"ip_dst":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":41518,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:50.893357+0000\",\"flow_id\":890951137411884,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41518,\"dest_ip\":\"47.79.48.185\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"btse1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":903,\"bytes_toclient\":1634,\"start\":\"2026-04-28T13:45:50.246572+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:51Z","timestamp":1777383951,"ip_dst":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":41530,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:51.941279+0000\",\"flow_id\":2036075317871561,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41530,\"dest_ip\":\"47.79.48.185\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"btse1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":2,\"bytes_toserver\":839,\"bytes_toclient\":1580,\"start\":\"2026-04-28T13:45:50.246729+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41182,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.395613+0000\",\"flow_id\":1329819485742393,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41182,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-28T13:45:52.861497+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41200,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.400009+0000\",\"flow_id\":1622925233892073,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41200,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-28T13:45:52.862953+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41148,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.411245+0000\",\"flow_id\":434516373021604,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41148,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T13:45:52.861092+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41198,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.417762+0000\",\"flow_id\":1138212404733407,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41198,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-28T13:45:52.861663+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41162,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.420652+0000\",\"flow_id\":1455296955294777,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41162,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-28T13:45:52.861241+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41166,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.425182+0000\",\"flow_id\":1361692438045889,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41166,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T13:45:52.861377+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41260,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.641372+0000\",\"flow_id\":2113023952140381,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41260,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-28T13:45:53.112733+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41266,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.646311+0000\",\"flow_id\":2177457051515051,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41266,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":904,\"bytes_toclient\":1634,\"start\":\"2026-04-28T13:45:53.112811+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41246,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.647224+0000\",\"flow_id\":1515705670416400,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41246,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-28T13:45:53.112656+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41230,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.652241+0000\",\"flow_id\":1604336615536571,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41230,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-28T13:45:53.112571+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41270,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.654036+0000\",\"flow_id\":1824135861878130,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41270,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T13:45:53.114034+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T13:45:53Z","timestamp":1777383953,"ip_dst":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41216,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T13:45:53.682794+0000\",\"flow_id\":1377055536166720,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":41216,\"dest_ip\":\"47.79.64.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"suncor111.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":5983,\"start\":\"2026-04-28T13:45:53.112448+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"btse1.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-04-28T13:46:11.297874Z","last_seen":"2026-04-28T13:46:11.297874Z","alert_count":0,"request_count":2,"received_data":71490,"sent_data":966,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"primexbtes.xyz","ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-13","domain_rank":0,"first_seen":"2026-04-28T13:46:11.318649Z","last_seen":"2026-04-28T13:46:11.318649Z","alert_count":44,"request_count":44,"received_data":2345331,"sent_data":21200,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"admin.dabaopong.com","ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-14","domain_rank":0,"first_seen":"2026-04-28T13:46:11.300641Z","last_seen":"2026-04-28T13:46:11.300642Z","alert_count":0,"request_count":14,"received_data":81862,"sent_data":8475,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"suncor111.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-09-25T19:51:36.914177Z","last_seen":"2026-02-11T13:55:49.687793Z","alert_count":0,"request_count":10,"received_data":27558,"sent_data":4798,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-04-28T14:09:52.567052Z","times_seen":742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"146f3409fb344f656387b810ebd82740","sha1":"5ce35f6eaafea05861a119903831b1187f8740a5","sha256":"b39080f2306a74459dbd6acc205800f2af5b0255195168d4408b6fc692deeff8","sha512":"e6c4bcc137c3ffdc54dcad70225cf8bbc22d12eb286a558d660dd9684cfa53e08b8ac94b107ec284a855270bd75dd138a559ad5bd5ec42356f8e3c0b3b8548af","ssdeep":"","tlshash":"b3c08cc8a0c73d101602a45050af25e49024802b70485b138e94d8582e220b48233e9c","size":146,"data":"","first_seen":"2024-01-22T14:18:12Z","last_seen":"2026-04-28T14:09:52.552149Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/etfs-3c0f4599.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8f086bf0f7a0585d2cf2a06cc4c52073","sha1":"9031215de8e59dcd354ed79225224ad2b7d0f806","sha256":"4858ab3d38156c4399b7ee8c1ef2b594caa679c63b15832df3facacd0432e48c","sha512":"c3ede138917a67bbe37f1657a85efa0e6d967a84099775dab7ff505a0e28185d92357b736d275859cb1740844b4d5cf106caa99e9503a4857f7d5e840c0ff12e","ssdeep":"","tlshash":"8ef0f9aea067897d8359394183575f6c400a88643cbc49f1eaba6c0f879e117ccf5f41","size":631,"data":"","first_seen":"2026-04-28T13:46:17.26305Z","last_seen":"2026-04-28T14:09:52.396923Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-3e30530c.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5bd8575191acda30f4a4e6f3e9c76cff","sha1":"df0da80d8ca136032da4212e541732f0c42e43be","sha256":"f28234552ae2a6fd1693174e6c4084338694649dc6bfb9a363005a789e60d06c","sha512":"78e7623d8543eb94d1f44ce9d7e1013debe4bf1ecefb206d85bcae612acca87aa16809bc6e62deab39aae3d7556b3d9a53836136903f4ec13e1334c6d7b60add","ssdeep":"","tlshash":"7451b70f34528074f3b94feb996852b141660b2976a189c1764f2e50c3bbdc9d867f23","size":2615,"data":"","first_seen":"2026-04-28T13:46:17.196937Z","last_seen":"2026-04-28T14:09:52.36272Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dfccd66bde50b0be31fd7bc1322166b3","sha1":"7226fb8daf615178d5ba80675fab0dff2a37b036","sha256":"1878743d4645b32b826f051095fca9bb5bd8ba9772785d7b660c8f64ed5c1700","sha512":"847db206b63c5d15c24c9684f207db7e6650138617a072f537015ff098e1c92491dd358533eeaa2c939e7befb69af351d45fd53a06427eaf67986dab13045ce0","ssdeep":"","tlshash":"91c08cc8b0d67e10a622641821bf24f89039402674485b52de98e84e3e630b08233ead","size":151,"data":"","first_seen":"2025-05-29T09:52:53.485091Z","last_seen":"2026-04-28T14:09:52.507065Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a1273481f249ced8f14bd6309f694edf","sha1":"aeccdd8dd529d6b7db091cc7d98eb598bc5c3c34","sha256":"5be07daeaae9f9f242f4653651fd15cc54cdf5845dd46c7f94206538c019805d","sha512":"660b4bd85fd69bd668901583f2a292d375894816e000ad57f3f7f3e4bc3645fa6cf98b686b62eefbba3752664dcd9a2854afacbe8a6015f616bef536d2429f5d","ssdeep":"","tlshash":"45c08cc8f0cb6e105602642060bf28e49038542670481b169ce8d8692e721f09337ea8","size":153,"data":"","first_seen":"2026-04-28T13:46:17.313579Z","last_seen":"2026-04-28T14:09:52.495286Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8749fb34aceb27d186abd4132445280f","sha1":"7c90a276f3870f0afd85d222c2cee56c16c3c31c","sha256":"c3733a195f4aca7cdfa77a4b1c6b7dfe03328ca2e2a8829e0f86aaaa5ddc9bf6","sha512":"8b68bf2ec12081d48d39a004b2350786ac6eba56710088953f084a46c83213197d78419408acef94686c298fcb6c10a17859389b0e2618436e85ac29012bcf1e","ssdeep":"","tlshash":"c1c08cc4e0c23d201612662028af79e4a038402bb0481b428e94d8482e630f09233fa8","size":149,"data":"","first_seen":"2026-04-28T13:46:17.314999Z","last_seen":"2026-04-28T14:09:52.549866Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/config.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1026c81fd20cae5b83cbcae7f99fc729","sha1":"47816e14feff0a5a6bbaf2dc0bf3ca8b539b7680","sha256":"44747c4d71ead765462b6896ecc8902f5eb570f8abbe0f074237564a495146c1","sha512":"eb8659e43c0cdfffb71717e6d0fbf8b98a9fe82a1879ccef3b9c5bf2fcabe46de52ef9db8b0468b7391c090e2397840b09356576ddf6864b2f56ca3e681e84cc","ssdeep":"","tlshash":"95d0a7b9d830352101001cf0c0ba19e15243363bfd40c5eff05afa5d6d0b7534962d81","size":216,"data":"","first_seen":"2026-04-28T13:46:17.286917Z","last_seen":"2026-04-28T14:09:52.438228Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-9df19bb1.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"500d7afdf2d401f188e63a44d849ef8c","sha1":"be4c91423ec80517321c77f70850b38cc681a66d","sha256":"1788f0e73f47d10dd523a561899835c6489f60ab89d3406538a5136c69d3c73e","sha512":"a7198de34cded813a8a119a98b5140ec9b533bfa915c2d41338a4c1ea05c54a5388615b2b24821e1bf46f31c268a73d85b4f5e195cfe5c7d4981acaa6effccf1","ssdeep":"","tlshash":"dbe08c1344f67da3442d27889d319c0028cea31ee5be2281484a333ca152843329e72e","size":331,"data":"","first_seen":"2026-04-28T13:46:17.241646Z","last_seen":"2026-04-28T14:09:52.36517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/utils-b8618b0f.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2f3be5096abe5e81f5a5149c929b7faf","sha1":"0a5004e13af6aac128e2077441e9be2cdf110525","sha256":"23c9b1f05bc56b87e9f6fd3f4d60e56686f688a2ad8e4f682186359a1420c037","sha512":"bfe4179156cb4a971f53dffd28cc6e3e2f4f6501cbcd3282b8ac1f7596d980a2c3d97c76f7fab1ff2439f72267e9230d669eff3813951d6da014fa44b7ff11c9","ssdeep":"","tlshash":"13a0024e4525c0a1c3595485d234de605431dd7d361131e400d98f16cbaaec7d55c590","size":68,"data":"","first_seen":"2026-04-28T13:46:17.222241Z","last_seen":"2026-04-28T14:09:52.405553Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e5b0316b273244c7823735d8af271c3e","sha1":"eed717962e069384d217dfa902c9fa268a1663b6","sha256":"d296f3c44a8040e568eaee4ea39db1b04903e9f824553efc3e5f610aba8b810a","sha512":"f5393067b8ed19435971b85b424806b483b8d9caa91c702ecf8263dda11673e0ace54584060305436c6387da9dd5ddc02c07695a8eb84db1bdb2c291799ac58b","ssdeep":"","tlshash":"4ac08cc4a0c23d001a02641010af28e49024402ab4882b428dd4d8582e630f08237e9c","size":138,"data":"","first_seen":"2024-12-28T17:11:44.923595Z","last_seen":"2026-04-28T14:09:52.458857Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8928413a3226b706fcdc03100fc2d5d0","sha1":"cf1f9636a01a55e7d1b106e446208fb6d69b5c56","sha256":"42b158dec54571cd4261f7125338724a65df32be5a9e8b21e152711e4444d016","sha512":"ab026f3369c8355266364c0a9b7b997dd08e4cdea52f6399869659cd75329b05868c18ddcc498ff842bf1a3e2b45dae48af8ed95caf8848d04d9504dfc4d99e1","ssdeep":"","tlshash":"58c08cc4e0c32d005602641128ef24e490244026b04c1b028dd4d8482e620b18233e98","size":142,"data":"","first_seen":"2026-04-28T13:46:17.317687Z","last_seen":"2026-04-28T14:09:52.446777Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"edaaf5fb4d39337f8d22ddb7428acd06","sha1":"3636e89b9de85cb1164f039823e7241c44e4f035","sha256":"19ba130f2d85babc12f41ef1c05fe74e91d01d1898ed502cf8fcb7ccec5f3533","sha512":"e07abf087307f103f232c4883cc18223c8d1c2a1875eeb327861a5aadf8bd7ab95d16c66043a24297f8cbfe5f8cc819cfcb18f9dba0cb88e8aab251cd11de2f7","ssdeep":"","tlshash":"66c08cc4a0d22e002602651425af3af4a024402670481b23add4dc482e230f08233ea8","size":144,"data":"","first_seen":"2026-04-28T13:46:17.318878Z","last_seen":"2026-04-28T14:09:52.538155Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ad9b688bd259ace6e193c084bdff5f5","sha1":"f39d4e9b27a86911d7c7d321a57f056598857c90","sha256":"1875fdeb5bd42b9d82deeb4085f4fdd108ea972424a670d2fa487557ec7b32cc","sha512":"5ffa6fbd5cfa08551ef6b54b0d46185c649934382585f205431ed669945e66388f216664ab9eed84075ed7a6b721e3ff6f5befd405674e9a111a2347e0e11774","ssdeep":"","tlshash":"d5c08cc4b0c62d002602a42514af24e49024402670481b428c94d8582e630b08233e98","size":141,"data":"","first_seen":"2023-05-19T17:54:23Z","last_seen":"2026-04-28T14:09:52.482534Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3e352e40da965a477c73b85f45fcbcfe","sha1":"3e723988fae01e9002cd221d32d0b80fc932dc85","sha256":"5437083c1c0938d596758b071b379432c6722f887cbe2dca49cc5dd12e4f48bc","sha512":"36bd9ae9981675720b34b16739e5bd73967018d36cffaf325c4415dede978a5c8950cd9ee99567264cef03b5020fc26def12f1274befcfba2f680291e9f34580","ssdeep":"","tlshash":"e2c08cc4b0c22d003a02a41024bf34e89024402670481b028cd4e8582e230b08233e98","size":140,"data":"","first_seen":"2023-05-19T17:54:23Z","last_seen":"2026-04-28T14:09:52.488722Z","times_seen":620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1faebd0b8ec83d9258948f07393e454f","sha1":"44d5ca89f13c7829bb8153a66ba0d76047eeb290","sha256":"9b72256f8545b5a7756926fc56e1d8634a74b0efdf96ee8291b743ac3434846f","sha512":"14dede173aa4e1c8244528fef9c867f813d3f391f66f1a356c2887fed20294f9df7265d0e8d5bab67bf8e1e1a3ca2238d1da9a6b806c008154a19ef701877830","ssdeep":"","tlshash":"dec08cc4a0c22d001602a41018af24e490248427704c1b428c94d8483e220b08233ee8","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-04-28T14:09:52.570895Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"42ec04bd42e3b65c7bf8a29a07c5d20c","sha1":"b1e72fc123491f312e81b1a9f312746c73c2cf61","sha256":"ad465b50428059cd78db66a69e2ebcba49b4c398f73e32ecada814fd27edc4fa","sha512":"d9ad9110769653052004d96953a77aef5d566a775008abb4224f05f3beb7630393dd0cdc5f77e37b62a3101a9456d0a95eee983516717c1b6760a1b61aaaf5e5","ssdeep":"","tlshash":"b1c08ccab0e23e002a12641061af25e890284026b09c2b028ca4d8492e220f08233e9c","size":144,"data":"","first_seen":"2025-09-25T19:51:44.217318Z","last_seen":"2026-04-28T14:09:52.509174Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d48edb2ed1ffd072c6ece0499937bf5d","sha1":"c9b892e4f33d6fed7d069ba170e326352cbf593c","sha256":"a1bfa54878355e61944cb43ab1047e55bbe2b3215016ca1d8219a5d577b72542","sha512":"5bf54890a4b1c64aa66a2b18ae393917c887b3026926dc387f42efd5c82aa059b0f898e6c590a6492f9f7e6c387fd099f781b0e8a042673b2a96208afbd15f04","ssdeep":"","tlshash":"b4c08cc4a0d22e002602645064af74e89024402670482b138da4dd482e620f08233e98","size":141,"data":"","first_seen":"2026-04-28T13:46:17.324043Z","last_seen":"2026-04-28T14:09:52.454292Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f3d293c52b5cf7c6e568df4f567dab2","sha1":"ea48f1ff620a09ea04cb31f0ffb855daaafe78cc","sha256":"d48b5fec12fe71aae9899908281b93c7fea21861412c458b46bab76a9d2b0ec9","sha512":"9e03ba14ee9d32088e5b1b9cfbd3793b512d110c6dd746085bbbb0e0782cbc608e01871a5c82a40e59d10724fe67aecd8115ecf8f5d8d56767806348701c6bd8","ssdeep":"","tlshash":"3cc08cc5b0c36d102a02645150bf3ae4a0244037704c1b068cd4ec492e220b28233e98","size":144,"data":"","first_seen":"2025-06-20T09:28:09.60021Z","last_seen":"2026-04-28T14:09:52.472091Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-28T17:22:58.929371Z","times_seen":631896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/otc-b3b05e54.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"000482caa81374112b7ec541cdfcec26","sha1":"6de5c2ca95d9e4952aff83289e09bf85be04560c","sha256":"023e7d74328bf6769ae478c485258af0500da1ccc9eaf2508ffc2a2d53426a25","sha512":"e3c1d02ebb3d8548ffd7b5885baa063b1a18fab826ee80643e91c02ef65d6b3b65f308296b6bfec0c5bde9fa9c1892df3cf33b83445982e384f263af6ce3fa4f","ssdeep":"","tlshash":"6ee0d84bd296bf71a67c023c2c1728864288354d4ad711a38853917001bcdef304fb64","size":372,"data":"","first_seen":"2026-04-28T13:46:17.224526Z","last_seen":"2026-04-28T14:09:52.376294Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ca2c8a513ba4ddd84c4c4857faf9f8b6","sha1":"29c6e6c68ff201ae5b1df93335a1170398f20b2c","sha256":"4466292d90055a17bde39e5aa47cf9fb23a76ce5d88f990de0cb7983d451a0df","sha512":"e886ba9c1a87b369d2ccd457d266da56dab3237f1446981dca3c9fda74e822dde664b62d3272bbe59b1e04b5ab7c49fd34668ad0e99528ef6850c3def75f668e","ssdeep":"","tlshash":"33c08cc4a0c27e509622641820bf28e89038402674485f529d98e84a3e760b08233eac","size":147,"data":"","first_seen":"2023-12-04T02:29:51Z","last_seen":"2026-04-28T14:09:52.543094Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4bd8e82cea752a5e25b464a127c72ee6","sha1":"0b3195a70cac15a7f64ae6ad0be3230f999fdc34","sha256":"6f10548e1010901075c419c70f83ce0879e7c5b18776673bd4347bc8d304117e","sha512":"fbe52d570c8f93d9322962b9b47db24e6a40beeea9fde43e19428a138a9b22c11faca2ee0c9d88f5cbcf748677015e14c6f54c2a41705540398d92b316f2a533","ssdeep":"","tlshash":"73c08cc5b0c33e101606b4142abf36e4a03588a774485b22dc96ec493f630f88237ed8","size":151,"data":"","first_seen":"2025-09-25T19:51:44.184028Z","last_seen":"2026-04-28T14:09:52.548885Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"654923d62709706f03a091f6b230a11b","sha1":"0162830f0d8dee5a9cea17fd9ea2fb3df89298a9","sha256":"12c8d2b469f3221f462a2b4b745cae18a2ff7e239dd6da3f2af489621b8c4149","sha512":"ed86e85110dd099c247eb8c1e2326cb18582323d9fc7a811e978fcbb97db0c426477931b327c85584e154bd06c16a49b8728a98789888a8caa97bb904ed561ee","ssdeep":"","tlshash":"19c08cc5a0c27e909a12a41820ff38e89039403a784c1f429ed8e8492f760f08233ee8","size":157,"data":"","first_seen":"2026-04-28T13:46:17.332544Z","last_seen":"2026-04-28T14:09:52.504799Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ee25df141b731e0db791e93312275f46","sha1":"c7de81b170dd04f2ec1244ea637bd67689a2e383","sha256":"ae4221e15a03cc0a37a1367e77b5065b2e6982a21f9bcd3c4daa1338db1695fd","sha512":"e42f5cec4374f848e64dbbc39d7fd67f02f214e3b9b3a8015f48d537257f6282c1b65422bd779b3d779f03192280698a84a5a93c9c4cc3fc5d7c3de3e2cf9a04","ssdeep":"","tlshash":"bec08cc4a0e23d002606641020af34e49024402670481b028cd4d8492e230b0823be98","size":140,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-04-28T14:09:52.468948Z","times_seen":3738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-04-28T16:12:24.073927Z","times_seen":4948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"92712bf7573ffa87e629ecf695541a76","sha1":"8d4221475489dbe113ef63f5c1868ef97392512a","sha256":"6cdb9a2a658a04336f0678e1b3c7808f69f2c1fc560a5a763633c88130ee5da9","sha512":"572b445205ad25b3cb77e255f9540967bd5e7c90a035526778300dc47c6022360238fe35cd8606523612bc7cde3190ba051af1d8921936090898efc8639f330e","ssdeep":"","tlshash":"e9c08cc4b0c26d442606641090af38e49034402770481b539cd4dc482e220b09237fd8","size":146,"data":"","first_seen":"2025-11-16T03:30:11.0149Z","last_seen":"2026-04-28T14:09:52.489866Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-f8cbdb69.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"62270de25830017638068bda7bf73ef7","sha1":"1303cec6372bbe2d5b3b8e0e3f376d6ae83b0e2b","sha256":"7fb8213b3f3a059d1405f1395b31d6a9d30d225b253b6484ebe731765f739ed3","sha512":"519cf22a3dfa4af39a9ff31959b90b0e3918718227ed8772addfd20450eec5e05c96f80063fbf7dcb71c3d966c16b12644f16195b0346d284815385ed90192da","ssdeep":"","tlshash":"c1113a5ef8e860f184241288d2c50465675e8e58e3fac1e85c6a4bb69ff0d09e19fa28","size":927,"data":"","first_seen":"2026-04-28T13:46:17.292987Z","last_seen":"2026-04-28T14:09:52.369457Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b754ea3e4c4effd9ec3213ab658876d1","sha1":"63ef8f43bcd45838f8b83ab54c4994b4b88d1a9e","sha256":"625da1898d7fc3c06623c93f9bb43d6f6d34d5e31891dbb1bf35936d4aa1e155","sha512":"25f64a073fee733880f99544e16fa94522c4859de4756e80da5b3db4a34e1a24a92f93d42e87ca3fc42fa656686e7cd8ee577c12b66b82025536892308c276dc","ssdeep":"","tlshash":"7dc08cc4e0d26d101612645454af24e4a0388066724c1b038ca5e9492e220b5a233eec","size":148,"data":"","first_seen":"2023-12-04T02:29:51Z","last_seen":"2026-04-28T14:09:52.501695Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"926ad28c98be26c2ab7d8f231631853c","sha1":"c1c7788df347ea5ab2369ae95456a8a1f7d9f150","sha256":"ec5e8816f60cbbf34b660d2d1455234d92295ab1a210868d6bbfeab7359e438a","sha512":"6f8eb48bc8638821747a26fc6370ee240e58d47699acbe5a1fb2bff1b25d62c6918f6df77dd78da3bc1b3e3d14eb849ccd4e0d1e01593294187bfd509be2ebdb","ssdeep":"","tlshash":"a5c08cc4a0c22d001a02641410af24e49024402ab44c1b029dd4d8482e220f08237ed8","size":138,"data":"","first_seen":"2023-12-01T02:41:08Z","last_seen":"2026-04-28T14:09:52.55509Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2c82e42e48706811345ff63e01071780","sha1":"d5d9e0e8f38c7284e24ddcec6334544be04e6fd4","sha256":"e2867a24385263e604c3ea7043c1b9657cfb7629f923e60088b9cb147b8a3870","sha512":"d54354717192cbec636563ace8734c8f5d62998ba5c338972bc9e90d7562411c242e8662d0ae3c5b6541e39779c51aa479380c9fd8878e056b59f4f99952f05e","ssdeep":"","tlshash":"9ec08cc5a0c77e801603a51550af28e8a034842774482b07dca8d8593e260b0a333e98","size":153,"data":"","first_seen":"2025-11-16T03:30:11.01051Z","last_seen":"2026-04-28T14:09:52.554016Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"82b314192b4dce18e996c2179c3b795f","sha1":"caf6f26b907ac13a6cb9491dee030755bd05e8d9","sha256":"84947a1b1be359bf621fe720ff7be49752dff1864c8b425bd03878586e6f6bf1","sha512":"bddfc79a501dc421a245cbae7b0d55d979c178f44810749081e62296e01f7399ecb87cb0e1e41f7b3769d3ee8c9838563cbec5d0c34eb2841184d4a589afae25","ssdeep":"","tlshash":"90c08cc5a0c22d002602681020bf35e4a024442b7448ab528c94e8493e620f08233eb8","size":143,"data":"","first_seen":"2023-04-17T20:49:21Z","last_seen":"2026-04-28T14:09:52.531682Z","times_seen":252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/index-852bd86f.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1379a33f2a3e2f5b98fadaa1f14e26ce","sha1":"8920ad9aa5847bcb502463a697cf8efe18ef0d5c","sha256":"4b1daba7a8e61ae6b6de827160593bc20b5181f3e33028080b8eeb282e783fa9","sha512":"c17f1e7481b534d561fb495ab68525e13955a85a1619d53ae6ae04e5c3d37194bbc39368795c78536e659f64571128a0e5fd0b29bd726f36387782bc770eb801","ssdeep":"49152:Fd2rUUwpprELWftnSiE0AHVMLRdD2SjKLuW5CSqtiwQlyz5D1umD2liVQRI9K0:gVuKwiwvz5D1umDxX7","tlshash":"ea857d9872c9383203d71691a06b5446b37d49a9b2498058b4fcd8fe36f989dd27bf3c","size":1830628,"data":"","first_seen":"2026-04-28T13:46:17.342418Z","last_seen":"2026-04-28T14:09:52.47651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/number-4205aaf6.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"db54da145c7fe14bcc3416dc2fee9d4a","sha1":"2108e092f39fb798076bee52ad81ceecfeb675f3","sha256":"9157ab61151597b97b4eaec6d4cd8d61cd058c67abdd8409e6aea1d5d1d19885","sha512":"4235b4e512d5892e52f43e59dd4a025b6b664de47130280ac63f2204cf48f5e50f7a5ce9c41cd9d59e7a211d0aabfd1161c3d2da54fdf2064cbfcca8e1b6c0a1","ssdeep":"","tlshash":"a4c08c8262877ef0270382080422d4042ca0afb86b16ca8844020507bb162a80409909","size":137,"data":"","first_seen":"2023-12-04T02:29:51Z","last_seen":"2026-04-28T14:09:52.387596Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-data-e1016205.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0ddd8063671864f1bd71033eee0817db","sha1":"a919bd0a8b25fadc3796444391c61ed2cf624ed7","sha256":"e21b0368fd437ffd2e8efdd4f83f06a42e6e6437d76fabcbae1ecb275b4134d4","sha512":"f1595270f8cfacab7eba3c945cb55739314392f936a8f556113ae6e4b57348da61ea8c0c008ef8a10bcee3b5e452b840e60260f35c8df96cc806161f561f7333","ssdeep":"96:FqqJ0vNpRCs9oevb9tlIhYBttQHE3WMFZyn1im5i6GdrmDx9:FPJ0vNpRL+A9PtGHE3WMFC17GAx9","tlshash":"a691b769b47d807fc3f24585a05c1424632baf9df23040d1369d2d128f9aca892deb6d","size":4389,"data":"","first_seen":"2026-04-28T13:46:17.257908Z","last_seen":"2026-04-28T14:09:52.37433Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"86607ac484109472dd26f2ec8aa528f7","sha1":"d864056f6c65c1c80ef852d6988cd845d4b4b9e0","sha256":"efe50c3b62779535d70ec1ce7ee577c8ae006671f14dfc1c8adf00c6523f0313","sha512":"92f38469bf09d0254e937a696fd23d1a702c41400abb4352c5f627ae517654cddedc768954ca1dd604c7e1449f4bb94916b5729aae13c9f933f172d441400d1b","ssdeep":"","tlshash":"b6c08cc5a0c62d022642641120af3ae4a024842a70881b529c98d8482e230b08233e98","size":143,"data":"","first_seen":"2025-02-17T15:24:03.196737Z","last_seen":"2026-04-28T14:09:52.529872Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fbd05672bca0b354f78ac2e0573bab96","sha1":"659887efcc6f8fef7327cffd63550c4cc56bcd2a","sha256":"4ce95bafb5f1c06205fb41750b027f6813785e05853d9edf80cecbeea8096901","sha512":"8f28ad30c436b8821ee5f13b8519bb57aa262f860a58fd4c7667fc14217b4450a67c3d3131ec3c5ee1af29b93f9904085da981eb8e4dbbd4623eb98179c09b0c","ssdeep":"","tlshash":"e9c08cc8b0c23d012a02695429af7de8a024402670881b128dd4d8482e230b88233e98","size":153,"data":"","first_seen":"2026-04-28T13:46:17.346197Z","last_seen":"2026-04-28T14:09:52.57641Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"236d061d908e7faa3cdec32a1ca81665","sha1":"65fe52218706b8a04d8f426dac52b2c8cb11b98a","sha256":"27fe2f6c11122eb64371d86b3cc030176ae622a621da59d1e37d440e7a85dc19","sha512":"4722f61b3428e9db22b0fdd8160564771de600f7a60e1ba345d0e49f1bcb676be7a96842699847c419b8aca9793a19b4718905553fec27f76cc6c34daa8f4244","ssdeep":"","tlshash":"ebc08cc4a0e36d002616641110ff24e490384426b4485b4a8c94d8882e220b48233eac","size":149,"data":"","first_seen":"2026-04-28T13:46:17.348411Z","last_seen":"2026-04-28T14:09:52.545163Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-04-28T14:09:52.567052Z","times_seen":742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29b5b04a73e20715d2c6bd7e27e0d504","sha1":"c8c58e6c6e8f8d549fceb9c569289afb184a977f","sha256":"a9aa6e5d553146602e7040498f0ff633f2afd0611fc1ee0f4141319fd5563f96","sha512":"13b7b0d56963cc97934cd8d37ae1e056ea60377afc6814649d54c15a1bfdf7b5ed5eb2a1bd20da520faedeb6e8d613c1680c8475d407e141135c050b8ffd1a1d","ssdeep":"","tlshash":"61c080c461d27e0055067914507f39f490698016758c5743cddcd8553f230f48237d98","size":166,"data":"","first_seen":"2026-04-28T13:46:17.35104Z","last_seen":"2026-04-28T14:09:52.461723Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0fdbf780970b00c98c4730162f0b4182","sha1":"6260536787026d8efb0a97dea711260e39c4c458","sha256":"50c68ea0e0424ca05c0f1f911dcbf1669961218b6ed9037100f205495309bd21","sha512":"8d82c9ec11ccbc9e4839fb2bb91b6295b662dc0fdd014cbe56dfcae7821a8d6c2561dcd355bd72be649566b3130aecfc5cec9738807152266601a6653df1492f","ssdeep":"","tlshash":"f5c08cc4a0c23d00161274106aaf34f4a038802bb08c1b428ee8d8483e230f4a233ed8","size":162,"data":"","first_seen":"2023-12-01T02:41:07Z","last_seen":"2026-04-28T14:09:52.558006Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f6991ad324e5b8872020bdec663076b8","sha1":"c6d68917ded2c492cdf734daae644425cf833db4","sha256":"d86a6e0e53d991462b0ef450426cab49a6bc0da0a237bf49edeb0ea2302d3d67","sha512":"8ed419d6406bb82baf42869bb5bd9ae80e15eb6bcd7f3ae91e98e3cc4e061ec45b800c9e1133ec3460aef26fcb3c386a8fd0b4c223c9b3b0ae2e1ccff3ee8cf3","ssdeep":"","tlshash":"5dc08cc4a0c36e001602686010ef25e8a034802670481b42ddd4d8482e634b48233e98","size":143,"data":"","first_seen":"2024-05-11T18:07:38Z","last_seen":"2026-04-28T14:09:52.443119Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3c35f7412c63cb2ee0e542afd5bc90e9","sha1":"05e4979b49d479e13388f1a070783263577a4e78","sha256":"659fcca3651c7c42656be23292b5f1575655b24dc34bd578daf84fb1eb7d599a","sha512":"d777e50b75321bd2f2218bb4c19b5f7000e7db7832a55e8c07eb164e662bf83cc0f3126ba448bd692769fe7b8c7b307a5a398c95861e7573b987679020bf57c0","ssdeep":"","tlshash":"2dc08cc4b0c3ad105612659010bf35e89024c02770881b12eca4d8482e630b09233ea8","size":145,"data":"","first_seen":"2025-06-09T18:14:23.186738Z","last_seen":"2026-04-28T14:09:52.474943Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/trade-02c4802b.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d7c3d6af468d6b4213c6ae6e52cb4228","sha1":"8d78553e68aaad9fe9ccb1927f5cd49721022a01","sha256":"31e1024d437c29192ee066b3e1dc9777be7b08328f8928ac4353791c505af221","sha512":"8e04adcbaaac88599eb95829944b7b792a69de3de03dfc9b67f79a2cfde1fe6a7698d1bd9becf87180a29e3368611c782be4880a1579ea4c0e367503a9e805cf","ssdeep":"","tlshash":"8171069d90778b3f8fa43c8ac25b6626911984683d794382f69f7c4ba71e801cd32f46","size":3509,"data":"","first_seen":"2026-04-28T13:46:17.3022Z","last_seen":"2026-04-28T14:09:52.398567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/index-3be4e24c.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"492c8d477853f7df1e7f22a124390bbb","sha1":"3aca635d87a7897e78e3c3b042587b1b03cbcb84","sha256":"075dada8c12ca7ee8df08b6497ec8c4272e439e88707235e7e3b0ac6cc861a5e","sha512":"bd4eb0e3cc98ac4b69a22f9fc32e9783dd6727b21e2104951c9faed3727a61397353b41e909db7e20de0caf174dfe9b131a240d45f35ae5fab35a7d7718e0706","ssdeep":"192:kgN+3Q+Dvo83J/FRnzSIelg3g6QfZ0Gr2DKVx:ksWQ+Lt5Gg3AfZF2u7","tlshash":"91e1a54ef452863cf0736054b52c58516118afefc291c9abbafd8d222396cbdb70d722","size":6779,"data":"","first_seen":"2026-04-28T13:46:17.219428Z","last_seen":"2026-04-28T14:09:52.390137Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c624d361badc220825798e0c554d246e","sha1":"99c006d9450b3626fbc9fba1e71e242eb8f3ccae","sha256":"c276aaf763711b439106dbb3f548b7070254f8c33068c782fd77fa9be54ebfba","sha512":"f41477c3d9b1603bd21cbe6e669f7847c0e08322ad27b47d85c15f05a88ca6e503276f2d5ae1c5a5cad9199d34d0e4c1a39ec1b50ec86f37d157aa71a12df135","ssdeep":"","tlshash":"4ec012c5b0832d102507651421bf38e89034c42a75481a639d9dd8492f231f64233e98","size":172,"data":"","first_seen":"2026-04-28T13:46:17.356542Z","last_seen":"2026-04-28T14:09:52.546375Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4e10947429c239088659a1a8f9a2913a","sha1":"c9854d587fc776d69ee64cced5c7a410c3f332b0","sha256":"19fe6a07bea55038a66e9293ef0f1961b84d9dcb104b6287e9c8f52586492458","sha512":"699fc1015058e046ca37b8432e839174ffe303a70f07d8e1e7ecc05d1a651f423e53298ac7313377a6bc3fe7349a96f09a5cca4c6f8280a479dd4b5bb127850e","ssdeep":"","tlshash":"1cc08cc5a0c32e002602681020af24e49028842670481b468c94d8a82e220f48233e9c","size":145,"data":"","first_seen":"2025-03-18T06:18:49.623074Z","last_seen":"2026-04-28T14:09:52.473946Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"41b872f2f759d3e3af1d5ecb69cccdd7","sha1":"3f46dfe6dc3113cc4be1946eef0cf652997f92ca","sha256":"99302884ac392d2e4877748ff130c4755248cc5ca8534393639782c85eee3af0","sha512":"06475f1edf817ceecb14bf7e1d97216e929257f5aea950528dd959c3cc56026f6acd4465eb37ace8c513c1a7397dc9177928ddeee81983177c63ba2678743add","ssdeep":"","tlshash":"cbc08cc5b0c23d101a02641410bf39e490244026744c2b1b8ca4e8893e620f48233ea8","size":147,"data":"","first_seen":"2025-07-05T23:43:16.320072Z","last_seen":"2026-04-28T14:09:52.451869Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"de98a1be8fd20299c5c1cab108c29f77","sha1":"021098777f0d01bbce688dd0cc2b722e9f6a77cc","sha256":"cf4a22a36821f2688005c231b17a2b537e9756af9f886be38c0c5bf06275f894","sha512":"d2f4a480c1ca52ea9f11bc841e3b695575178db22a43eb91191ec998fe77fe08ba250bf8e1905544f00d36a29e2d9c13f2234cc14e1889ce97e4067a60f40089","ssdeep":"","tlshash":"7bc08cc5a0c22d105a12641454af26e49024402670481b278cd4d8492e230b88233e98","size":147,"data":"","first_seen":"2024-01-22T14:18:12Z","last_seen":"2026-04-28T14:09:52.569716Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2536da268f3c128d7ee6860bd195d512","sha1":"bcc868c792e42e681e75879988c6e56b36e99def","sha256":"90eb31728a4349075a33df3e2b016942bd79bae5e82b2419ed2bfe96deaf7af6","sha512":"38a919e3da2b35abe1ac73407451f364ad4b82b15e27b3cd74c1ab16243bde02fa11f5ca1399bb80d7bd8d1ed5a9a0ef56e830d0e6ae7cebee6e9113a6ac43fd","ssdeep":"","tlshash":"a4c08cc9a0e23e001606641010af29e490284026708c1b028c94d8482e220b48233e9c","size":139,"data":"","first_seen":"2024-08-29T17:49:52.053963Z","last_seen":"2026-04-28T14:09:52.52803Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8b17ec51c3be85680686a0f9b5a3d759","sha1":"a049720c0d0cdcdb78508d928c1f666ef6abcbe6","sha256":"35a7d9b0e99f54c15b521945303e543d18204865e928edd366da3f15f10a5180","sha512":"17bc8c0a70a385c273c57142367d4cfd1deaa95949f8f07459b6a1a548740fd5940a903dcaa3a885299cc5d8c8517a3d2408289540828587d5eedc61fb1b4f40","ssdeep":"","tlshash":"0bc08cd5a1c22d126602641920bf38e490248027708c1b128c98d8482e230b08233e98","size":144,"data":"","first_seen":"2024-08-20T08:29:42.434295Z","last_seen":"2026-04-28T14:09:52.445257Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"06f9e4de9c14414596f7e54367230cce","sha1":"f2be73e30fc63863267f2b6b3ff3347a7a051b8e","sha256":"15c2a4051948b828d9298ff2a3f27bd8ee254fcc9e4ebf6879aefdcdd474edf0","sha512":"c6961ae0c4d35dccd54c25def48dce28605ba3cdbdbfe4703dfee3e9f272ddf93e535ab3db04285741a5d0516f76bbc141e199119ccc97785dfa53170985f994","ssdeep":"","tlshash":"8ac012d5a08a2d041a46655525af25e89024442a74492b569ddcd8482e231b54233e98","size":173,"data":"","first_seen":"2026-04-28T13:46:17.362992Z","last_seen":"2026-04-28T14:09:52.54389Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"df4967913130281363d855c8ca7de06b","sha1":"a1dec0ee425d19b3e51769da6502d50d77eab421","sha256":"6bdc8b0990864134124b13c2545c10ffc138f1a9a4cd08e8c0c987ff3784a869","sha512":"0d810d803a03b338f8e4d23b32d4342afe3dbf2571380f8f99bd6092b794ccebc08ab87071b5b9841af9bb7aa51c3dd9df5b5eb607c5888ce114d06a1af6cbe2","ssdeep":"","tlshash":"11c08cc8b0cb6d205622762020bf28e490284027b0481b038c94d8582e720b08237ea8","size":151,"data":"","first_seen":"2026-04-28T13:46:17.364283Z","last_seen":"2026-04-28T14:09:52.453077Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"50ef0020aad6ff6665788954a64a4e61","sha1":"62cf2dc99fdc3614f2094cf14a4883804c987bf5","sha256":"625957b57107f68ad24dd810d63ca590b937069a409503591467829cfe1630d8","sha512":"af32b95da362d8b63eb4a52997156e24fc65eb769bd91dcdd807602078998073a0a645b9bf0d07a2ad6e62406b3141a8f74af5fc5b76887be737e3ddb2066105","ssdeep":"","tlshash":"4ec012c5f08a3d155556a56614bf6ce490385416704957068c94d85829361b0c333eac","size":180,"data":"","first_seen":"2026-04-28T13:46:17.36546Z","last_seen":"2026-04-28T14:09:52.498637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"49c86c1da75c970839c5a788e00dfe6b","sha1":"bc9d075cd5c995b8c3116cf914440e2f2a61f600","sha256":"7f7ac06c38ff0febf11e2d7ddb21a409c6ded24f0ecbca24ea56483ea4fb573d","sha512":"a27232289db1a524b1cace6955949179e2a6430a0d74ff266156b538cafa7ba1c3e4ed80c4a05c5688d1f1d2a361dbb666e8070017d00c7d3caeec04f271797c","ssdeep":"","tlshash":"9ec08cc4a0c66d001612a41024af24e49024402670881b428c94d85c2e220b08237ee8","size":137,"data":"","first_seen":"2024-04-22T01:39:33Z","last_seen":"2026-04-28T14:09:52.479036Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13e90f3839a643a14b938e09d9f7e0e8","sha1":"21214dbad5c55723b99bd535c36be306ca3da2ed","sha256":"eeccc4b37578922d71fa8ea954adaf7677986adf657f40ac18fed32d71d9bc36","sha512":"12f1d87bb5b8574c62562b88c212f2eca903617354d5251a8334d5931439eae6f259c6d4d3580424fe920b1b6c32e845375cab71fd17c19832723eb6a4a7a0a4","ssdeep":"","tlshash":"89d0233a0004453cf4124bfd90d1b8c05475740776c2d4fe674cd2b165d5d115563155","size":216,"data":"","first_seen":"2026-04-28T13:46:17.36737Z","last_seen":"2026-04-28T14:09:52.567969Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3b27c4202e8bafcfe827c850aa7f4ba0","sha1":"9c629b0ca47ba370b0747e8852beea09b0d6312c","sha256":"9f40546bfca8db5918ef2fb86470cd3bb7fa7028d41e55794c17baf7d748ef7a","sha512":"cf352b90a58a018770ebf755a2491b8e301044b1fddc24024b8f88ade0360ba640cfc380ab518534c7662a1dbc971192470921ddd5c536feaa7627624384244d","ssdeep":"","tlshash":"aac08cc4b0d62e002602641020af24e4b028402670481b028c98d8582e334b09237e98","size":141,"data":"","first_seen":"2024-01-22T14:18:11Z","last_seen":"2026-04-28T14:09:52.508434Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3b4c1c632a9253be71d15901a67e5736","sha1":"728d2e4951da7bf399b7d54b675f17732ac938ed","sha256":"573cc7af8ef0ae6cde3588715917d46b20390d791b0786df96f3fd4bc0d7855a","sha512":"239d3e018f8d9124f200b8bdc576adcaf746396e84333be98746da9fa8985e8bc9e13fcd145a2ec9c2168641609b3cfcf6b9afe9ba17dbd772cd5464d1791687","ssdeep":"","tlshash":"7fc08cc4a0c22e102656a85020af24e8a0244066b0482b02ac94d8483e220b08237ea8","size":143,"data":"","first_seen":"2023-07-09T14:24:47Z","last_seen":"2026-04-28T14:09:52.572121Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4a36c7c58e9ba8c41eae2e68d8eae3b9","sha1":"ef292c51ea3982a519bcdb17f862a14f435eec99","sha256":"5c41435a6bf85b970d9870bc0a238c36b82b5ab67a44cd7b12e2756fdb645bff","sha512":"4afa042a19ead074effc9da3db514e8f1cc6de4db07469c0963091ec22b197eff7ee1783ef51b6fe57780d899d61c319e3ee231a6dec6c3483fbff5ea1efe1de","ssdeep":"","tlshash":"d7c08cc4a0c6ae001606656050af38e490244026b0481b428d94d8582e220b88233e98","size":141,"data":"","first_seen":"2024-07-17T11:16:22Z","last_seen":"2026-04-28T14:09:52.444069Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-04-28T14:09:52.456066Z","times_seen":637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-04-28T14:09:52.557391Z","times_seen":1179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/common-470ee71e.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f3b63a71a6f3798f3ee105dfb5bd320d","sha1":"0d8f2b41db669cd1d6bd1fbd573e0414d0558b26","sha256":"f292d2b7834fc94acb62692229a0b490336b69574269ed2764b13af5c5d1b61b","sha512":"244845fe1cad2ed9f2759c400970ed942af7fc618127df34fb5f86f54b4ba0dcee368587bb5c4f3116e90ae28aa71f4e4350f0dc675dbf3a95a8ca6b46856851","ssdeep":"","tlshash":"44d02b4fd0b38af603643881d02526054006c32c3c748dc1f5486f4b879e44a8c3af42","size":265,"data":"","first_seen":"2026-04-28T13:46:17.231441Z","last_seen":"2026-04-28T14:09:52.416741Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cae68ea6f141e4d10555797b47a00137","sha1":"6d7487ad2c6cd92d7b0a57c7671d65ea34816136","sha256":"621aec1748ccd29106df6b756539d8363900d1bb9e6a155f105e538561488bc7","sha512":"802598a54385e66c4aade9d8089953400177bcf218415227baf3edc88bdc4236c6625635fc4ae2814940a6a46be01540afc18ba5334325b4fc4840b2cac33967","ssdeep":"","tlshash":"e8c08cc4a1c22d001602681010bf28e49024802670481b028d94dc892e620f0823be9c","size":140,"data":"","first_seen":"2023-04-14T08:59:55Z","last_seen":"2026-04-28T14:09:52.536021Z","times_seen":1609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6fc94d7c5cb0403843fd787268d1b1c8","sha1":"47dd6f43ff2a21647ed27aa5320bece2eb704610","sha256":"cdabc615727743e8f7de097c4a105339f897b5b712b526728f8ed2b2a4240939","sha512":"0681d0cfd14aecd21755c774f7a185ee7e6666b205d2abf3ce269151fbe2a313fed69b33285432dfb224be3788c6b3b64024578b122fd48d1f4f18d071cf4ab2","ssdeep":"","tlshash":"cfc08cc4a0c23d001a22742121bf34e49034402770881b428dd8e8482e630f49337e9c","size":151,"data":"","first_seen":"2025-12-20T23:18:45.127673Z","last_seen":"2026-04-28T14:09:52.486495Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/config-95799068.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b86934490f01c4382e4c46d773884e1d","sha1":"4eddedc7e28e8ef022de84fa9253480ff1b5f08d","sha256":"de2ed0a7f21cd64b747ab4a4d3cfc786784310223389b9865293c0327539a553","sha512":"2e772a1c849d6589f1d6e208193d5a06197e0d3a577b0208ac31a3b1402f8e432de5219f66470fc1011271225b8681b70bb84c65a58799e2a4888a40516b5cea","ssdeep":"","tlshash":"76018c057264747328684bc5e04504b20b212bdc6b4be3d4b07f473921778c1b12af25","size":816,"data":"","first_seen":"2026-04-28T13:46:17.24652Z","last_seen":"2026-04-28T14:09:52.367241Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4c148292419b7a5a646989e8820f14c4","sha1":"3a027ced632b65f0659f621ee1828997731eb736","sha256":"8f66e8a2fe213ee6b37613e12ef4b5813d203770d2d400e20d1430a8e3b82425","sha512":"ee929cf10d20234e540378bc22cf9cfc292a0949207020b360fbd686e369662b2b7225b7176b4184216da172f1f253c4fb9aa0dc4296247e2558be1c244d3fd0","ssdeep":"","tlshash":"4cc08cc4f0e76e001a06756028af34e4a0288026b0885b42eca8e8493f620f08237eac","size":154,"data":"","first_seen":"2026-04-28T13:46:17.379545Z","last_seen":"2026-04-28T14:09:52.541567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-04-28T14:09:52.487938Z","times_seen":821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3099988579b153e1351c58236acd96d4","sha1":"e67752988414c2fb08332c7e023bdf8fadce5ef8","sha256":"620944590a73dd8fe02066f875ade924434c687cd6f998dc0fb39c0bf3652d61","sha512":"547678a2c975aa9f0da2c81b6f59c18adec6d71d894f8e321cfd28988dc46bd2adb50817ec80c4bde76ac845b63a4eaa4bdc289cdcbd415153f1b3f38afe683d","ssdeep":"","tlshash":"a3c08cc9a0c67e001602641112af24e89034402770482b42ced4d8482e230f28233e9c","size":147,"data":"","first_seen":"2025-09-25T19:51:44.190826Z","last_seen":"2026-04-28T14:09:52.532974Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b3d304a45ef44af246a5a574749e0873","sha1":"62e7055d3f2a0e55d451f60324d7a67a48094f96","sha256":"e6dbeb320dbac32cf50e8c852a7dcbe081bbfaac7629e6e34912aa2127987e08","sha512":"2e2e1d5ff0cd294bb0300b5037f02fb2ad61c44e4bd02a514f6cbb0d0b01f43110dc5b521a06df32785ccfb0b0fc50618e7da81b762068f18b34aa963e8982b2","ssdeep":"","tlshash":"bec08cc4a0c22e102646641010bf38e49024403674481b028c94d8482e230b08233e98","size":140,"data":"","first_seen":"2023-10-21T11:34:47Z","last_seen":"2026-04-28T14:09:52.575338Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"24836a94635c09815d516090d13f034d","sha1":"68656045eaa10a8578b558ab6ea33f3a340bfe5a","sha256":"1bb410afae24f2305b3fdaeb90c843f13f5856531d9f6deee186c15abe9884b9","sha512":"9ffe73ba29c4c9ac4ea3433b6e28759b46ed532b9b398dac446bda05101b7606795e076547d2c77c2c29b11f1d9516a0e3e4e852c8451ea876050aad118d623d","ssdeep":"","tlshash":"e2c08cc5a0c27d101602659010bf25e89024802770885b029c94dc4d2e220b09233ea8","size":140,"data":"","first_seen":"2023-12-24T00:38:08Z","last_seen":"2026-04-28T14:09:52.484041Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/trade-018cf68b.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"534d0b1b9ad7aa7883d37da72d8eebdb","sha1":"52d0d851e051c18be48b24cf73d191c9de1a6b14","sha256":"27c900096967c575fed23cb6cc8154bec00764bf9f966348913850e8b0b4805a","sha512":"a0ac826c48476387a19ea45508327025e08e578c0226ad6bbb7620b05396278b345591707f21db2ebecc964e7f9a9e1ee21f2baf4b6e01cbfff3cb2e7f948e1d","ssdeep":"","tlshash":"1a112c1f8542bc30a872f76cd4f85e964071329ccb9ed8f5c825813d22749d5e47f984","size":1026,"data":"","first_seen":"2026-04-28T13:46:17.288064Z","last_seen":"2026-04-28T14:09:52.407253Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"395139a08922c1ecee6579e4a9e73a9f","sha1":"9ae5827f59157483929c3a80a38f207b78987f07","sha256":"5ed3848de07ad6585add928bcf36d6fccab26a3750dba3050f7d44683eb7fac2","sha512":"6308d1c1592764b208d85e4ba71e65bc4d10f705bc835c9711aa65ac60c08bf846277f646c0dfa11836b639a420827b2080bd841e551889cb0adc208115fe58d","ssdeep":"","tlshash":"6bc012c5a09a3e055a05745564af29e8a0244426b0485652dd94d85c2a524f88333da8","size":178,"data":"","first_seen":"2026-04-28T13:46:17.388131Z","last_seen":"2026-04-28T14:09:52.556317Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e9408ebca071158b4fcb5af398b52741","sha1":"d82c6d8dca45f00a7689e96bf72fc2e04337224b","sha256":"5537e2cedee6c540675d9845ee5625adba8c2f5f1705b3716052bf847ef46dd3","sha512":"29b6dcaca1860f1c170e184c65ab652e7c30a1c500c9bba29e2f5a42314db5f8993c7f10cbd255fd829e44d014ca28a3b7a4215eb9e530a316c08107a84a8ded","ssdeep":"","tlshash":"c2c08cc5b0c26d042606681050bf34e49024402774482b839dd4ec493e620f08233ea8","size":145,"data":"","first_seen":"2025-09-25T19:51:44.212804Z","last_seen":"2026-04-28T14:09:52.574531Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/assets-02c1e9d7.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"088515e3f03a2fef900a4c4933177d06","sha1":"cdca089e25b07ff69a94b9c134bce260645fdeae","sha256":"08f0b896b8544cd8bd544a75066b2373bf417d9c7fe6b5c22143d04b0262da99","sha512":"3349f4c42296bb9468a09bbd737d638ff1b06970550bc21565b3608cc2899ab200761266f2e098a02485bbad4b6ca51548a597cecb3a8f25c783c2c4b69b0ba6","ssdeep":"","tlshash":"1ad0a983026cccf074224b3ee929080295b12a686a0a08a0423ab2b0b2304f6d186ab2","size":216,"data":"","first_seen":"2026-04-28T13:46:17.243923Z","last_seen":"2026-04-28T14:09:52.41134Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fe38a231daabca7ee9331f1601a08e31","sha1":"22bf55758c90a53410cecd193fcb1c3216367d49","sha256":"f5bff08a53c4d278175a0a1220019e39232feb024918177f6d0f522dba4e8239","sha512":"6178f6fbd722656b8158b1b081cd981cf60e36eef4fe02d52f733a4df6d2e2570223735d03f97e55563633cd69218cebb85f2685a8d3ea38f4fd2a7f0498d266","ssdeep":"","tlshash":"77c08cc4a0c27d002606641010af24e49024402670481b028c94d8482e220b08233e98","size":136,"data":"","first_seen":"2023-05-04T20:29:59Z","last_seen":"2026-04-28T16:12:25.160571Z","times_seen":881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"73596c338d169a77c14c675797dd5a1d","sha1":"49b5757c0634ffee7c22bb9057a9fac073edcf5c","sha256":"c4dcf096f3f381fd823eec18a2202f4d9273f6455c5e966d22e460a8a45cd3de","sha512":"a6d28b907baf850790429be9bd459e70b4e15a3d7229b31d03a1c557f39f4f9e87f36c68d128668629a6e24e8992bf53497d84f1292a3616cf63520ca5f77787","ssdeep":"","tlshash":"88c08cc5a0c76d406606a41018af38e8a024402770882b02eca8d8892e234b19233e98","size":152,"data":"","first_seen":"2025-11-16T03:30:11.015608Z","last_seen":"2026-04-28T14:09:52.540448Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4f2d62c805430acf615cc0086cd9c0da","sha1":"f71b5fdc75ecf46e64eff671843ace8aeaacfc81","sha256":"0814c7bb67c375973f439bbe4add88765684017b640048dcc87e3ff5c86604d2","sha512":"62954cd5329104e4ac652978ce0b599cce00fd68416541d4a1f09992ba5e9f41919ea7abfacdcaeb77c6a7d29de422938124017774a55d31fd26560c1adb3713","ssdeep":"","tlshash":"19c08cc4b0e26d102602655090af34e4a0288426704c1b028ca4d8482e620b49233e98","size":141,"data":"","first_seen":"2023-12-04T02:29:51Z","last_seen":"2026-04-28T14:09:52.485077Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e1b5f2113b32bf9bd78a7cb2fecb558c","sha1":"b281a8dc96941029ae15ee999dd5964d58abc4d2","sha256":"d0db13aa8a9394432786af6556f6c84620d3d2c09dbd25453d93991452d17ac5","sha512":"ab94e78bcfea1ca62961f88e2ae011d9f5d1c4d083c15d68d58c07d9b62047c275276c0ebe7c26ee382774ecaa3fcb9ab05e561e627cd1094c93aa364b5b4f42","ssdeep":"","tlshash":"b7c08cc4a0c23d001622641068af34e4a034402ab04c1b428e94d8482e230f09233e98","size":147,"data":"","first_seen":"2023-10-16T14:25:23Z","last_seen":"2026-04-28T14:09:52.451047Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-3e30530c.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/quote-3e30530c.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-a37\"\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8%2FAJGtIqIojQ50gCeshZvcJyA42dKMnbDOD1281SYCflrBJYHA8k9Ycm2A4Kq8PHTi%2BtIEFuQPDxVxipEy0y71SlsO%2BxpDJgZSkZqiXDv9ZT8glTAN0%2FLgXmEIcj67g%2Fg%3D%3D\"}]}\r\ncf-ray: 9f3682782e584c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2615,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2614)","md5":"5bd8575191acda30f4a4e6f3e9c76cff","sha1":"df0da80d8ca136032da4212e541732f0c42e43be","sha256":"f28234552ae2a6fd1693174e6c4084338694649dc6bfb9a363005a789e60d06c","sha512":"78e7623d8543eb94d1f44ce9d7e1013debe4bf1ecefb206d85bcae612acca87aa16809bc6e62deab39aae3d7556b3d9a53836136903f4ec13e1334c6d7b60add","ssdeep":"","tlshash":"7451b70f34528074f3b94feb996852b141660b2976a189c1764f2e50c3bbdc9d867f23","first_seen":"2026-04-28T13:46:17.196937Z","last_seen":"2026-04-28T14:09:52.36272Z","times_seen":2,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/home-swipe3-4b14c053.png","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/home-swipe3-4b14c053.png HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-7779\"\r\nexpires: Thu, 28 May 2026 13:45:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BjP2urPvpXDeuv0%2B4JpcTrBLCaocPLDPnigTtY3Twro7rrZe346rHqAIXSn9wXUVfrFwr%2Fnejn%2FXRk507tMmxe2ifyMMc47pPmOdRVcipYRi0MmQzMRnv6mzR0boIIUO0w%3D%3D\"}]}\r\ncf-ray: 9f36827a2f184c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 506 x 230, 8-bit/color RGBA, non-interlaced","md5":"7c1c0b1d17cc90059cb01e0e5c76d6d9","sha1":"b71b9855ac9302b1f69d964a215d3584adf19fdd","sha256":"4b14c0535e9c69daee28c1c01b62eeae5bd0c4151149a999dced287bef05b155","sha512":"2dbecef93ceacf4828c654f8e16ee83c0d6f7fbd75fce86f4d0d89b29688bcf6cdbcf4455868fff3768d8d6b1337408eeaaf389fefd51c1fa72dc790b94e8f68","ssdeep":"768:mdO+LCU0ivNDBBA4qd4n3+1ip48kC4qBWucIybA:mdN/0ilNaVKnKKP7xou1","tlshash":"67d2e0290dc8c26ed96f30797e5e52116f6e88bafe8e96d725f657708814702620c60f","first_seen":"2026-04-28T13:46:17.200678Z","last_seen":"2026-04-28T14:09:52.400237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/user/info","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"GET /api/user/info HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nDomain: primexbtes.xyz\r\nApi-Nonce: 89e960a0-5425-46c6-904b-65ff8a3bb55e\r\nApi-Timestamp: 1777383950\r\nApi-Sign: 0111BAA71BE67A498498598E67A6E29A\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\naccess-control-allow-headers: *\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:51 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0FU5AbvtlTBoGJAMK760WOoAOWP2ud7J1Fe%2Fxop09Y%2F4Ey04KxsYkzpLfPr7EGfYWySvQ06AV5xM8sJLyEPbNVwZxfUO0oG%2F1X0fQT0olG2CiEJJ1skzk1Wng7ZWhzds6VjpF7pM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f36827d8eb923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6197957a9213545bde5014a4edb51456","sha1":"0a57bea56401fe989f353fc3e4e2355faa1362b0","sha256":"e503f767ef8a2186dbdea5d96de28db1087c3d1431c140f2be4842d1d1c3d323","sha512":"92966e48927b0ff2a8b8b104f266662bac345faa10b4166f0ba7be60542cbfaabd9e53b24f4a718cddb6189fb3b82acea4831ad601d9d2d4fa59c3a9cbb05cba","ssdeep":"","tlshash":"38900214580c18030945464465552600169e59932a128ba94c5c9731649406c6221959","first_seen":"2025-04-20T07:15:57.197947Z","last_seen":"2026-04-28T14:09:52.371462Z","times_seen":23,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/notify/info","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:51.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"GET /api/notify/info HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nDomain: primexbtes.xyz\r\nApi-Nonce: cc497528-ec85-496f-8ad5-cfdcfb86dbe8\r\nApi-Timestamp: 1777383951\r\nApi-Sign: 7E8B5725589E71677F00EB321977851C\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\naccess-control-allow-headers: *\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:52 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8%2F3VnTub74waCPd%2FnmwOs0NC6ixQBxxCQ8Nai5tuslJaISZjJP5C1%2F9bdMjOj5OeYQAEIxeDZRimtiPww%2FWFmO9CbGxEPBGvqMj2173Kp6cJbiO0m0OKR8BCvNDq0mC4FxVAdMn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368282cfc123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6197957a9213545bde5014a4edb51456","sha1":"0a57bea56401fe989f353fc3e4e2355faa1362b0","sha256":"e503f767ef8a2186dbdea5d96de28db1087c3d1431c140f2be4842d1d1c3d323","sha512":"92966e48927b0ff2a8b8b104f266662bac345faa10b4166f0ba7be60542cbfaabd9e53b24f4a718cddb6189fb3b82acea4831ad601d9d2d4fa59c3a9cbb05cba","ssdeep":"","tlshash":"38900214580c18030945464465552600169e59932a128ba94c5c9731649406c6221959","first_seen":"2025-04-20T07:15:57.197947Z","last_seen":"2026-04-28T14:09:52.371462Z","times_seen":23,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suncor111.oss-cn-hongkong.aliyuncs.com/coinlogo/1747036672-235077473.png","fqdn":"suncor111.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coinlogo/1747036672-235077473.png HTTP/1.1\r\nHost: suncor111.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 1689\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA11AFAD5B353985B292\r\nAccept-Ranges: bytes\r\nETag: \"10CF06286CBBBEDD91B8F78C3AE6E330\"\r\nLast-Modified: Mon, 12 May 2025 07:57:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12182439961928679409\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EM8GKGy7vt2RuPeMOubjMA==\r\nx-oss-server-time: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"10cf06286cbbbedd91b8f78c3ae6e330","sha1":"7f99ceb13cfd623be9d2cacb50674b286a51787c","sha256":"9958501a3eae199046f2e1c2101e150d9e27995690eeb6a8226ea308a91f4312","sha512":"efbe856f8910ed6532eba749afa7446259f16977e8c861affa35601d2c804436c8090f474b48447791e7400f805ec0a956af2d5bb3e9e5161ba0079389beb8c5","ssdeep":"","tlshash":"4e3141f167d87c39e884271bd299912c17ff295e7c5245436ca196736c64dd08f944c3","first_seen":"2023-08-18T05:10:02Z","last_seen":"2026-04-28T14:09:52.373524Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1925,"timings":{"blocked":832,"dns":5,"connect":265,"send":0,"wait":282,"receive":0,"ssl":538},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/index-3be4e24c.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/index-3be4e24c.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 20:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d91-1a7b\"\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jg4EotY%2FGtghiz20TIbnikcXmxrHajOtsgLkkW1uPofZ61liZjf3OI3YHBmwic1HjZA5K%2BPbY9u6YpzMYhNmfYXp9tCYQHzRNK91K%2BFhELTu%2BZ8G40VnLOmcB4AQfZtTFw%3D%3D\"}]}\r\ncf-ray: 9f368273fd4f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6779,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6778)","md5":"492c8d477853f7df1e7f22a124390bbb","sha1":"3aca635d87a7897e78e3c3b042587b1b03cbcb84","sha256":"075dada8c12ca7ee8df08b6497ec8c4272e439e88707235e7e3b0ac6cc861a5e","sha512":"bd4eb0e3cc98ac4b69a22f9fc32e9783dd6727b21e2104951c9faed3727a61397353b41e909db7e20de0caf174dfe9b131a240d45f35ae5fab35a7d7718e0706","ssdeep":"192:kgN+3Q+Dvo83J/FRnzSIelg3g6QfZ0Gr2DKVx:ksWQ+Lt5Gg3AfZF2u7","tlshash":"91e1a54ef452863cf0736054b52c58516118afefc291c9abbafd8d222396cbdb70d722","first_seen":"2026-04-28T13:46:17.219428Z","last_seen":"2026-04-28T14:09:52.390137Z","times_seen":2,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/index-3be4e24c.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/index-3be4e24c.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-852bd86f.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 20:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d91-1a7b\"\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3hrGB%2Bk7A94cLeaa9qXEz13N%2FPOaYygKUiho5XRV%2BdhViCmMZMjaslAouoFE5MNDfJelbAe8V7ZVez3XJ6RcicC4TNhilA6a0B3lNxLA3dqF874OUDUvTdTKWsrjUALGA%3D%3D\"}]}\r\ncf-ray: 9f368276ee244c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6779,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6778)","md5":"492c8d477853f7df1e7f22a124390bbb","sha1":"3aca635d87a7897e78e3c3b042587b1b03cbcb84","sha256":"075dada8c12ca7ee8df08b6497ec8c4272e439e88707235e7e3b0ac6cc861a5e","sha512":"bd4eb0e3cc98ac4b69a22f9fc32e9783dd6727b21e2104951c9faed3727a61397353b41e909db7e20de0caf174dfe9b131a240d45f35ae5fab35a7d7718e0706","ssdeep":"192:kgN+3Q+Dvo83J/FRnzSIelg3g6QfZ0Gr2DKVx:ksWQ+Lt5Gg3AfZF2u7","tlshash":"91e1a54ef452863cf0736054b52c58516118afefc291c9abbafd8d222396cbdb70d722","first_seen":"2026-04-28T13:46:17.219428Z","last_seen":"2026-04-28T14:09:52.390137Z","times_seen":2,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/utils-b8618b0f.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/utils-b8618b0f.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RvItDHzUqXMPhwacwK2KZZE1iLgwCSulwVjtL2PjEJfvFP3cpUnjKiXJ7YYweAcNmtYMyOw2HmhANz9XaL9PnJZ9lZ6ZfcF2IDEPAzVODSob6R%2B8sIUAeOmbroqiN16nng%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de9d90-44\"\r\ncf-ray: 9f3682783e5c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2f3be5096abe5e81f5a5149c929b7faf","sha1":"0a5004e13af6aac128e2077441e9be2cdf110525","sha256":"23c9b1f05bc56b87e9f6fd3f4d60e56686f688a2ad8e4f682186359a1420c037","sha512":"bfe4179156cb4a971f53dffd28cc6e3e2f4f6501cbcd3282b8ac1f7596d980a2c3d97c76f7fab1ff2439f72267e9230d669eff3813951d6da014fa44b7ff11c9","ssdeep":"","tlshash":"13a0024e4525c0a1c3595485d234de605431dd7d361131e400d98f16cbaaec7d55c590","first_seen":"2026-04-28T13:46:17.222241Z","last_seen":"2026-04-28T14:09:52.405553Z","times_seen":2,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/otc-b3b05e54.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/otc-b3b05e54.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0fgWS8HynBuk848HxXGOoWOGryLE3b7YytPRI7E380UznptBrHfRNdaI21pqvpBr9SviTpA0wLecqFBNJMD8lgbYTfBJw6uw2RmdK0iPAgHOHCktbefWxzKWW0DzQhObTg%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de9d90-174\"\r\ncf-ray: 9f3682783e5f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (371)","md5":"000482caa81374112b7ec541cdfcec26","sha1":"6de5c2ca95d9e4952aff83289e09bf85be04560c","sha256":"023e7d74328bf6769ae478c485258af0500da1ccc9eaf2508ffc2a2d53426a25","sha512":"e3c1d02ebb3d8548ffd7b5885baa063b1a18fab826ee80643e91c02ef65d6b3b65f308296b6bfec0c5bde9fa9c1892df3cf33b83445982e384f263af6ce3fa4f","ssdeep":"","tlshash":"6ee0d84bd296bf71a67c023c2c1728864288354d4ad711a38853917001bcdef304fb64","first_seen":"2026-04-28T13:46:17.224526Z","last_seen":"2026-04-28T14:09:52.376294Z","times_seen":2,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/currency/getMarket?type=0\u0026period=1D\u0026page=1\u0026limit=10\u0026keywords=\u0026trade=0\u0026is_following=0\u0026is_recommend=1","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"OPTIONS /api/currency/getMarket?type=0\u0026period=1D\u0026page=1\u0026limit=10\u0026keywords=\u0026trade=0\u0026is_following=0\u0026is_recommend=1 HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: api-nonce,api-sign,api-timestamp,domain\r\nReferer: https://primexbtes.xyz/\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-headers: *\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:52 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BgyccWLW%2BPGzN4XCVipTl%2BB49RgWUbEkayRS%2Br1yMzg2eaugCPASG%2BBI44FxgQON4w7dSEos9FUQqUUzr0gqkIWs2aXI%2BBMg0R5%2B4n0UVr7VOFtEkF%2BIfZpgoteyNY%2B8MTHBMmJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368284bff223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T17:24:07.120456Z","times_seen":14335314,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/index-902743e6.css","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:47.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/index-902743e6.css HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-204c8\"\r\nexpires: Wed, 29 Apr 2026 01:45:47 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECG4GzXW7%2FCGP2QvNZjfVfL%2BGTMid9OpXNXH%2FJFcOwbEToMV1T2uiw2RW3x2r25kXatHnh0n3PjD5%2BuMzthKd5rY2R1xZBoOqOjOAFhkrZdMEp0AX2k62HVJ6cuIAtNaWQ%3D%3D\"}]}\r\ncf-ray: 9f3682690b184c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132296,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"47a647126c25265dc91822fc55595bbf","sha1":"47a1cb5ec6280cda693b548d8bf24b9e9fb4149f","sha256":"902743e68e3c7fe54572cfaa5382c1bf5c5021a7d0fb0830660c0ff335460ab4","sha512":"de12594d0035fec6242c6aba5ccab957badf731c75c663bb65da5d79d5345741d24288074be9f9ac6743c850fd21dbd1b8e8828c08a97d4ed0402c155d56b606","ssdeep":"1536:3jYe1IyNBi3MFYaQj7FCwsBlDOFIxuVox83CeM1Ah5aIzcs8:3jYevNIClDsIxuVS8jHmv","tlshash":"c9d3e7a0f58091bd6f2bf1799b87e6d8b23cf621cd41ca95f50511580ecb7f602b3a25","first_seen":"2026-04-28T13:46:17.228728Z","last_seen":"2026-04-28T14:09:52.403854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":377,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/common-470ee71e.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/common-470ee71e.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWFV0fQTB4em8jfkyy%2BV8xEkOyDT8oSJiASnOxEGhRNqfNKtOOpaVSQvS%2BdBUIzwu1gbx7HB0IzMg8Ud362AltYa3y8CuxE5Ono5Qf5UjkrXWeXeQXrqX5If3Cn3V4L86g%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de9d90-109\"\r\ncf-ray: 9f3682782e554c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f3b63a71a6f3798f3ee105dfb5bd320d","sha1":"0d8f2b41db669cd1d6bd1fbd573e0414d0558b26","sha256":"f292d2b7834fc94acb62692229a0b490336b69574269ed2764b13af5c5d1b61b","sha512":"244845fe1cad2ed9f2759c400970ed942af7fc618127df34fb5f86f54b4ba0dcee368587bb5c4f3116e90ae28aa71f4e4350f0dc675dbf3a95a8ca6b46856851","ssdeep":"","tlshash":"44d02b4fd0b38af603643881d02526054006c32c3c748dc1f5486f4b879e44a8c3af42","first_seen":"2026-04-28T13:46:17.231441Z","last_seen":"2026-04-28T14:09:52.416741Z","times_seen":2,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/user/info","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"OPTIONS /api/user/info HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: api-nonce,api-sign,api-timestamp,domain\r\nReferer: https://primexbtes.xyz/\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-headers: *\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWVS5pQ%2BB9f89xG%2F8ZqXckmU26o85TjkttaS8s4jsG8SwWb3IzeUN6VYe0d4QM5dypsKtzN2ndCmqo8RTihuV5zgj0ZAmfGUmB%2BS7Debmz%2FKZjAb%2BPbyHOFMoxwunul3jJwKNPDd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f36827a8e2e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T17:24:07.120456Z","times_seen":14335314,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/currency/getMarket?type=0\u0026period=1D\u0026page=1\u0026limit=10\u0026keywords=\u0026trade=0\u0026is_following=0\u0026is_recommend=1","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"GET /api/currency/getMarket?type=0\u0026period=1D\u0026page=1\u0026limit=10\u0026keywords=\u0026trade=0\u0026is_following=0\u0026is_recommend=1 HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nDomain: primexbtes.xyz\r\nApi-Nonce: 259f6e16-d7cd-40ab-8501-08de74188107\r\nApi-Timestamp: 1777383952\r\nApi-Sign: A2938E6F9F4A0168C3D777777223315F\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\naccess-control-allow-headers: *\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:52 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rc%2F0PJXU74jw6qJF0M2osFtuYrh5smccthqvkTlHCn13HGKfCaoFCqOGX1qsjJFCPn63itxij0q034nFfD%2BclKu7qxzU%2B1vduFknGF7mDkp5nJC8BpeKJT%2BqctShnUzr5kpymUvx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368286882d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68836,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5e789466f3fe28ba48b640acc4f2b3e9","sha1":"7faaf7b02f4bb4ae19a4a30ecb24715d2ed1107c","sha256":"6e8701afa79b44a96c2d6eff9a641cd15a3d91ff77dafa7d4df3c6cd6e227387","sha512":"0e0840d5ea9fc81fb922401eb81855a39d0d7234843fd90e514b69bb9e18ff44b33845a806a940a58a3f680fb83152ac401a81cee52ebea26872c2744adc4d2a","ssdeep":"1536:kHsIcyffU/a2L0eq+1N06ONz8ycCWsm9yx7gxNCV9hU9hj0:u62U/a2L0eq+1N06ONz8ycCWsm9yx7gM","tlshash":"2d632d4062ac55b4c0f65cc43b967c28926e701b78c28fa9c2ff448159e667bf529f3b","first_seen":"2026-04-28T13:46:17.233646Z","last_seen":"2026-04-28T13:46:17.233646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suncor111.oss-cn-hongkong.aliyuncs.com/coinlogo/1747036680-101524013.png","fqdn":"suncor111.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coinlogo/1747036680-101524013.png HTTP/1.1\r\nHost: suncor111.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 1715\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA11E613583836134794\r\nAccept-Ranges: bytes\r\nETag: \"85117F93A865158085F79C113F555ABD-1\"\r\nLast-Modified: Mon, 12 May 2025 08:22:45 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 1664831391255830964\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"247c9f29f092290c89d4a6f292ecf5a1","sha1":"1e5cd6c833ba704d0ffa6ccbec25e8f97c94c385","sha256":"87b4b76d14a9d62d05e2deb26c91b774db25579211e8e2b738dc419e5ba6ce2e","sha512":"a99d4a9ec446a4c69c0a923f337506c2b67ff67cd112c1f4dd75847007fa5be153bef3f9917b45650686cd475a94c8c68cc3a7718e7f2f2b2cad96c709d0b68f","ssdeep":"","tlshash":"c73118b6a22ecc8a597227267b2f0ce9a4ed283451d36bad307a716dd61385807d01c0","first_seen":"2025-09-25T19:51:44.143885Z","last_seen":"2026-04-28T14:09:52.378969Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1930,"timings":{"blocked":824,"dns":0,"connect":274,"send":0,"wait":280,"receive":1,"ssl":550},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suncor111.oss-cn-hongkong.aliyuncs.com/coinlogo/1747036674-215055480.png","fqdn":"suncor111.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coinlogo/1747036674-215055480.png HTTP/1.1\r\nHost: suncor111.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 2773\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA12E6135838366A4794\r\nAccept-Ranges: bytes\r\nETag: \"010B418B9B361EB3F2B29AB491D414D2-1\"\r\nLast-Modified: Mon, 12 May 2025 08:22:35 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 12707715999605693282\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"a5fa5f3966c776c1ad681eddabf0d855","sha1":"df7bb058bd897328d96c1dd799cadc15ff164229","sha256":"42355d7519c5b17fde35ef68dd1d0535956543582ffc03c785e1ec18d5e34330","sha512":"c0795e7a95ea7d3371f84e5f89cb7b2015f841e70bfa86b2f36438c7fd9d148739aeb7db4d28cd9422b5ab75c2bd8f3be1ad3e87f17c6cb551800d39f6eafaf4","ssdeep":"","tlshash":"8f512ba25f31562956e670e2e0729676cc6119119e2aa6dd100bf43e5f8293f21cd0bf","first_seen":"2025-09-25T19:51:44.069207Z","last_seen":"2026-04-28T14:09:52.437165Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1377,"timings":{"blocked":1093,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-9df19bb1.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/quote-9df19bb1.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GedmxFd4ijXvSEO390HkB1zwnai4%2BpsY9oD7oEB%2Fx3xWuXvgzMRZzlAOGiOVR9s%2BsQ%2FrleBR58fyUNABN6GiToHeXTzpSvO9Ii5PjQRrbMNHdZgDMUG6gA%2FFkqrcXXFlTA%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"69de9d90-14b\"\r\ncf-ray: 9f3682740d544c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (330)","md5":"500d7afdf2d401f188e63a44d849ef8c","sha1":"be4c91423ec80517321c77f70850b38cc681a66d","sha256":"1788f0e73f47d10dd523a561899835c6489f60ab89d3406538a5136c69d3c73e","sha512":"a7198de34cded813a8a119a98b5140ec9b533bfa915c2d41338a4c1ea05c54a5388615b2b24821e1bf46f31c268a73d85b4f5e195cfe5c7d4981acaa6effccf1","ssdeep":"","tlshash":"dbe08c1344f67da3442d27889d319c0028cea31ee5be2281484a333ca152843329e72e","first_seen":"2026-04-28T13:46:17.241646Z","last_seen":"2026-04-28T14:09:52.36517Z","times_seen":2,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/assets-02c1e9d7.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/assets-02c1e9d7.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TvooTcsADi%2BscPEDxJgmAglafWyZpGsrEo1IrByJBPU1OAAQ2znEguXnkTIUMdNc3RcA%2BtPLPBVMf%2Fi%2FPMSxdscxtCBTJrHe53RCxmOU6vjg6CeAK4TXY%2BbWlpZCxEwKJQ%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"69de9d90-d8\"\r\ncf-ray: 9f3682740d594c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"088515e3f03a2fef900a4c4933177d06","sha1":"cdca089e25b07ff69a94b9c134bce260645fdeae","sha256":"08f0b896b8544cd8bd544a75066b2373bf417d9c7fe6b5c22143d04b0262da99","sha512":"3349f4c42296bb9468a09bbd737d638ff1b06970550bc21565b3608cc2899ab200761266f2e098a02485bbad4b6ca51548a597cecb3a8f25c783c2c4b69b0ba6","ssdeep":"","tlshash":"1ad0a983026cccf074224b3ee929080295b12a686a0a08a0423ab2b0b2304f6d186ab2","first_seen":"2026-04-28T13:46:17.243923Z","last_seen":"2026-04-28T14:09:52.41134Z","times_seen":2,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/config-95799068.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/config-95799068.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kaBWT9edikeXlko0rxR8BApVii%2BpUSqG8QUX9l7oeSsL9%2F7XkZI%2BBNTKaBzYS7IHRzGFpoCad3qcifs7s0qcXaaf4JXLndAC3SuHp%2BKfbok27M76bTT8vgvYS00kfrHEfg%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de9d90-330\"\r\ncf-ray: 9f3682782e524c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":816,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (815)","md5":"b86934490f01c4382e4c46d773884e1d","sha1":"4eddedc7e28e8ef022de84fa9253480ff1b5f08d","sha256":"de2ed0a7f21cd64b747ab4a4d3cfc786784310223389b9865293c0327539a553","sha512":"2e772a1c849d6589f1d6e208193d5a06197e0d3a577b0208ac31a3b1402f8e432de5219f66470fc1011271225b8681b70bb84c65a58799e2a4888a40516b5cea","ssdeep":"","tlshash":"76018c057264747328684bc5e04504b20b212bdc6b4be3d4b07f473921778c1b12af25","first_seen":"2026-04-28T13:46:17.24652Z","last_seen":"2026-04-28T14:09:52.367241Z","times_seen":2,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/empty-image-63b4f435.png","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/empty-image-63b4f435.png HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 20:03:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d8f-16ac\"\r\nexpires: Thu, 28 May 2026 13:45:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FOryGKf6z6CwOIL4dtAxcyQiY5SIz1SMT2gL%2FY1jEzaEFaz%2FkQnSnUQ1YcJvI7Yfo%2BXYFFE%2FAFI3Wom7yh0SjpCozgoS9bw3ckDqZEKZADx4m3S6K27mTiQlT3T39NIWkQ%3D%3D\"}]}\r\ncf-ray: 9f36827a0f064c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5804,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"276c05f0dcfc46a82dee8d8623bf6437","sha1":"754e0871530e3b799bfdc1dc2c036970c0a6e80e","sha256":"63b4f435d894bb6348ad343063d309e3508a4289153c91da12e1a43d0deeff92","sha512":"2a4839510f835dbc1890c5d625a25c896080ba5c5384605e93f81a8ecc300e4edbf8846dad3139bc6311afe5f1c4fd48f53bd9a9b2d25291650672530161882d","ssdeep":"96:rVPN4EF1msrJg3bAZd1keLmG2XbSBzD+k2U1rOf64p6RV9ZAAAOVm:/4EmKVNmG2e1D+Rq48RlAAAum","tlshash":"80c19fe7a5537f74aa45552ac23ba24620401e6352de8c670e1b4de0f1f72aa14ea3f2","first_seen":"2025-05-25T07:53:06.345213Z","last_seen":"2026-04-28T14:09:52.389341Z","times_seen":9,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/number-4205aaf6.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/number-4205aaf6.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mO%2FGmhlaTpgR39WgzVN1US4JJMqAo%2BHcZ%2FIQ9gAcPnnbcTW6N5XH7unIREzY9Tn6OFWHT6hb4ZhuZC0ey5xRsIiZKd7LgDAM12R2UB5ZmctcvhlfW1b5pXoudD5935zqSA%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"69de9d90-89\"\r\ncf-ray: 9f3682741d5b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"db54da145c7fe14bcc3416dc2fee9d4a","sha1":"2108e092f39fb798076bee52ad81ceecfeb675f3","sha256":"9157ab61151597b97b4eaec6d4cd8d61cd058c67abdd8409e6aea1d5d1d19885","sha512":"4235b4e512d5892e52f43e59dd4a025b6b664de47130280ac63f2204cf48f5e50f7a5ce9c41cd9d59e7a211d0aabfd1161c3d2da54fdf2064cbfcca8e1b6c0a1","ssdeep":"","tlshash":"a4c08c8262877ef0270382080422d4042ca0afb86b16ca8844020507bb162a80409909","first_seen":"2023-12-04T02:29:51Z","last_seen":"2026-04-28T14:09:52.387596Z","times_seen":11,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/home-swipe4-6b57e948.png","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/home-swipe4-6b57e948.png HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-c583\"\r\nexpires: Thu, 28 May 2026 13:45:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOLyk5Qvi9Jt7JHvCgdoT0wE3LKrCZq4%2BNT3XqdzwsG01%2BhurPouv5mmG13cNtxi2sk4ROjIL7fSR19aFuAI9bWu%2B6ehBQXw8Au3wDJ4vvyL49YP1mXbXjwepNMsjQZmog%3D%3D\"}]}\r\ncf-ray: 9f36827a3f1b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50563,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 506 x 230, 8-bit/color RGBA, non-interlaced","md5":"7b72014775e2f417ad9d7e84a0c12122","sha1":"69b548139d2c4e6f6c6a837a2c61872bf4ac6b5f","sha256":"6b57e94802629f579081c7426a2d86d113396be03baef1cabccad4020bca5a57","sha512":"131d6993cb5d4768328fd410ce0a5d477d2576d1c9ff3246891d28ac9bee614c2d02d294bc990e5acc4f7c927c97a8ed414013c8633a6cbd1f51b1d43d660b61","ssdeep":"768:Lg29jud61GbcUxuz8BoclE1rUU2K5daokiPs+l91SQ6g/wbvva5b4QOQ4Y0:LVm64bSAPE1otscbir1SnkcQOQN0","tlshash":"57330267e554aee5cb6810759ae76d22cbbc21ace76d41080f6d43c0b61caedef60702","first_seen":"2026-04-28T13:46:17.254477Z","last_seen":"2026-04-28T14:09:52.383969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"suncor111.oss-cn-hongkong.aliyuncs.com/coinlogo/1747036673-951095901.png","fqdn":"suncor111.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coinlogo/1747036673-951095901.png HTTP/1.1\r\nHost: suncor111.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 1842\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA11E613583937FE4694\r\nAccept-Ranges: bytes\r\nETag: \"3596A57CDE0B2DFC82F1C67CF55862CA\"\r\nLast-Modified: Mon, 12 May 2025 07:57:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12836415757181559455\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: NZalfN4LLfyC8cZ89Vhiyg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"3596a57cde0b2dfc82f1c67cf55862ca","sha1":"ed2ca46c15c26bb7e013683ab4ed4a0016451a03","sha256":"1d368d3765918d1b003da871479107613cce9b6ba5aa673b825f4bef21656b1b","sha512":"d3b17e3eb5d311f6b6a7400b0fb5ec8f39302630ec7400b1dbb0cee7380186efa483b189b8924ff592413e8ff97e50489bc2a442ecf76bf901a4f8a8e62d720e","ssdeep":"","tlshash":"12315d2d135379887b40443541c8d010f67c56b1f1b0a34c88f9d91be162f4e1843e8e","first_seen":"2024-08-20T08:35:39.512888Z","last_seen":"2026-04-28T14:09:52.395285Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1893,"timings":{"blocked":815,"dns":1,"connect":267,"send":0,"wait":269,"receive":0,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/user/info","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"GET /api/user/info HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nDomain: primexbtes.xyz\r\nApi-Nonce: 2638f672-74cb-41ab-ab37-759b11b4886f\r\nApi-Timestamp: 1777383950\r\nApi-Sign: 1AAB747CBA507FC2614158AC6A3EE2B4\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\naccess-control-allow-headers: *\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:51 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TEvRTY7r3lxJIV%2BYR7MKVjXd3czf2BewbFghmLnLQYsnkpH5db%2B6EGFGTLMcPC1S6zy206gZ4YebRCxi%2B0%2BBI3cRdfkugVdfZH2cnERcAv9mzvFyPtBiqpoVavnlHswqxFGh1vrZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f36827d8ebb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6197957a9213545bde5014a4edb51456","sha1":"0a57bea56401fe989f353fc3e4e2355faa1362b0","sha256":"e503f767ef8a2186dbdea5d96de28db1087c3d1431c140f2be4842d1d1c3d323","sha512":"92966e48927b0ff2a8b8b104f266662bac345faa10b4166f0ba7be60542cbfaabd9e53b24f4a718cddb6189fb3b82acea4831ad601d9d2d4fa59c3a9cbb05cba","ssdeep":"","tlshash":"38900214580c18030945464465552600169e59932a128ba94c5c9731649406c6221959","first_seen":"2025-04-20T07:15:57.197947Z","last_seen":"2026-04-28T14:09:52.371462Z","times_seen":23,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"admin.dabaopong.com/socket.io/?EIO=3\u0026transport=websocket","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://primexbtes.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: QUs03pOdWQqhOTgY3/y5NQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 28 Apr 2026 13:45:49 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: G7MNKbPFZiv9wPdW98g9Lj4hEF8=\r\nSet-Cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PnWj%2BIktsIZZQ9NQFuV7HPVDPMaQXivr90vrKJ4yzrvXFWqLaK9bEsjxn8Zt4HiOBlkP60lWQhN7poGmwDcOI8ELXma%2BEXs%2FtCyVy0fGj0XxnHEveSnh%2FATYm62DW6%2BtkdVEinsu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9f368273cabf56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=556\u0026min_rtt=493\u0026rtt_var=202\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3115\u0026recv_bytes=1196\u0026delivery_rate=6205714\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=1f6e757a60857b18\u0026ts=428\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T17:24:07.120456Z","times_seen":14335314,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":0,"dns":20,"connect":20,"send":0,"wait":413,"receive":13,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-data-e1016205.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/quote-data-e1016205.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 20:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d91-1125\"\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xRQEpox6p2e9cOC3Sw%2FizKAM1u6TRrfwuB2Z7bO%2BSNl2%2BZC2iJWz3D3d9xotcKStkLHnYJwKrZCkZ%2FsjuQ7k8Seyp0sCkjpJ5u4YSRsYZO2tRec2UGgpyXE2l3jtYI0WQ%3D%3D\"}]}\r\ncf-ray: 9f3682782e504c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4389,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4388)","md5":"0ddd8063671864f1bd71033eee0817db","sha1":"a919bd0a8b25fadc3796444391c61ed2cf624ed7","sha256":"e21b0368fd437ffd2e8efdd4f83f06a42e6e6437d76fabcbae1ecb275b4134d4","sha512":"f1595270f8cfacab7eba3c945cb55739314392f936a8f556113ae6e4b57348da61ea8c0c008ef8a10bcee3b5e452b840e60260f35c8df96cc806161f561f7333","ssdeep":"96:FqqJ0vNpRCs9oevb9tlIhYBttQHE3WMFZyn1im5i6GdrmDx9:FPJ0vNpRL+A9PtGHE3WMFC17GAx9","tlshash":"a691b769b47d807fc3f24585a05c1424632baf9df23040d1369d2d128f9aca892deb6d","first_seen":"2026-04-28T13:46:17.257908Z","last_seen":"2026-04-28T14:09:52.37433Z","times_seen":2,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/user/info","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"OPTIONS /api/user/info HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: api-nonce,api-sign,api-timestamp,domain\r\nReferer: https://primexbtes.xyz/\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-headers: *\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XM76814Osddc3Qn3av6j1I03FPMcOb4bGHrF%2FoWl%2Bsd9TkO4j6vy2YmwWpMpvwjWiZbsqbXEEYNWrg6GkR%2BOU3kKN1Vvapo04wg9XCVcI45qY3wDIyJB5TEV0Dt1emso8CAE%2B7XI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f36827a8e2c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T17:24:07.120456Z","times_seen":14335314,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":13,"dns":1,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/news/detail","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"OPTIONS /api/news/detail HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: api-nonce,api-sign,api-timestamp,content-type,domain\r\nReferer: https://primexbtes.xyz/\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-headers: *\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nallow: POST\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GC6D4mTbpHS0GJeYIkEDIIn5U2famQ1nAQK9CfwMhqHkdaePAQ4mRcV%2FJymw9vIQ0zTgJaHC0XCrVJtWb0l05WOJ5FDzEKbs%2BBkJRO0DgBmHoQ2AR%2BdmUPIH9pxysvNyAJfzhmgJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f36827a8e2d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T17:24:07.120456Z","times_seen":14335314,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":470,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/index-852bd86f.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:47.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/index-852bd86f.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 20:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d91-1beee4\"\r\nexpires: Wed, 29 Apr 2026 01:45:47 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfViXeCmfeqnan4wTtrvLHbZs6%2FYQR56xOhPcFtu4Buy8Crs5xz1LFl%2FApVLC2B87dYqaqIKTsDgxb6YnzKkuK55Nv6WSxUVx4NK458dj%2BOM7pzfa6Gb8vUxrzcIcIk26g%3D%3D\"}]}\r\ncf-ray: 9f3682690b174c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1830628,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45217)","md5":"9da6523f43d22f96dcbd1ec11d200dff","sha1":"74465d668274d1aad690284047a5d2b26a5bf65a","sha256":"55cee56c64038b15b706bae60f3b852c888e33fb101932d8d3e9f9e6dba306ff","sha512":"76d356c294725d7674ceafaed469d659a8a9008da8582328f6f82e54116d561ca649e8a80467ae9b390ceaf9ba4b5c4761ffdfb4e8bdf31eb0418d9bee09ee68","ssdeep":"12288:VLjd32o8k/rxyGokTso7yWQ4mSwt2Ozv3RF53vNEHDNIuyLP2qcKbqpPaR11NJxF:VLjd2rsfkWiSQ2A/Ne/BpKbb94+x5CAL","tlshash":"78457f59b2893f7202fb0691f0ab1ac16d7cc8c5e38d441e54ecc72d22dd6edd2676a8","first_seen":"2026-04-28T13:46:17.260305Z","last_seen":"2026-04-28T13:46:17.260305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":984,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-data-e1016205.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/quote-data-e1016205.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 20:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d91-1125\"\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FR2zUvzbzUi7SOGyoawVqFr4m3LFctmxW5PE397Wsb1MHIJd0B3N6shUhYkQzR%2BTjsD3PNXAXLDRCySP03t%2F2b1n%2BNr94BZi1CvOjJFn%2FAS7Aq9FzCFCXj9jtUwKEyVxGQ%3D%3D\"}]}\r\ncf-ray: 9f368273fd504c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4389,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4388)","md5":"0ddd8063671864f1bd71033eee0817db","sha1":"a919bd0a8b25fadc3796444391c61ed2cf624ed7","sha256":"e21b0368fd437ffd2e8efdd4f83f06a42e6e6437d76fabcbae1ecb275b4134d4","sha512":"f1595270f8cfacab7eba3c945cb55739314392f936a8f556113ae6e4b57348da61ea8c0c008ef8a10bcee3b5e452b840e60260f35c8df96cc806161f561f7333","ssdeep":"96:FqqJ0vNpRCs9oevb9tlIhYBttQHE3WMFZyn1im5i6GdrmDx9:FPJ0vNpRL+A9PtGHE3WMFC17GAx9","tlshash":"a691b769b47d807fc3f24585a05c1424632baf9df23040d1369d2d128f9aca892deb6d","first_seen":"2026-04-28T13:46:17.257908Z","last_seen":"2026-04-28T14:09:52.37433Z","times_seen":2,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/etfs-3c0f4599.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/etfs-3c0f4599.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uuzt6cet9ns55x6b1sidRfIfRIR2%2B2pHqJPinzB13Uc2HcyKTBEDi5mhXc02TNZGWNyqswAjkSciojU1zoRbnRFIuF7XF7qx0ysEa%2FR5y5C8wST2XuvDUeOHNeiMWhIQvg%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"69de9d90-277\"\r\ncf-ray: 9f3682741d5e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (630)","md5":"8f086bf0f7a0585d2cf2a06cc4c52073","sha1":"9031215de8e59dcd354ed79225224ad2b7d0f806","sha256":"4858ab3d38156c4399b7ee8c1ef2b594caa679c63b15832df3facacd0432e48c","sha512":"c3ede138917a67bbe37f1657a85efa0e6d967a84099775dab7ff505a0e28185d92357b736d275859cb1740844b4d5cf106caa99e9503a4857f7d5e840c0ff12e","ssdeep":"","tlshash":"8ef0f9aea067897d8359394183575f6c400a88643cbc49f1eaba6c0f879e117ccf5f41","first_seen":"2026-04-28T13:46:17.26305Z","last_seen":"2026-04-28T14:09:52.396923Z","times_seen":2,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/common-470ee71e.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/common-470ee71e.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsRiGgrjeoKx16XsVHKbpdMz%2BNHPNCD8KpLKoelhDbMcjpD3tRJdbleuMVlb407bBS7OvfUCFMRu9C%2By%2FR0jbBCrGYp5ywMnL1ZHC9nMhGzoSTcEge45bEkMaG%2Ftl5GIhw%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"69de9d90-109\"\r\ncf-ray: 9f3682741d5c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f3b63a71a6f3798f3ee105dfb5bd320d","sha1":"0d8f2b41db669cd1d6bd1fbd573e0414d0558b26","sha256":"f292d2b7834fc94acb62692229a0b490336b69574269ed2764b13af5c5d1b61b","sha512":"244845fe1cad2ed9f2759c400970ed942af7fc618127df34fb5f86f54b4ba0dcee368587bb5c4f3116e90ae28aa71f4e4350f0dc675dbf3a95a8ca6b46856851","ssdeep":"","tlshash":"44d02b4fd0b38af603643881d02526054006c32c3c748dc1f5486f4b879e44a8c3af42","first_seen":"2026-04-28T13:46:17.231441Z","last_seen":"2026-04-28T14:09:52.416741Z","times_seen":2,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/more-item2-5a642bb7.png","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/more-item2-5a642bb7.png HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-2f3b\"\r\nexpires: Thu, 28 May 2026 13:45:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CC0a4cU5ykhkiqNpiFaSNjGlye7AD8LLYCnDoV6clsZVikyIcYwMXpdFJnoQDWsQU6DUzQ87bZq30t6Sd4GhdT6BuHiLaFRfZHm3Xazxc5S7hxwSfZ%2FL3osHafKD7PMiQ%3D%3D\"}]}\r\ncf-ray: 9f368279fef64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"842175da544ebd6d4af2ab05c98a4b45","sha1":"0c4c9ff8260baab598004d85137e9bdce050a19c","sha256":"5a642bb76654f7fdf13c8ae92d53f16e377a15f39f7925c62bd2d6b35a388016","sha512":"d82b3c355d6f630a9233e77d9ec5ae3eaf475dd7de4fb57dd042d448234910d7a50a4d3982b1ccec9ad2f2301e4f0979a9c58e8b6a0c35dde1f48d1b8117140a","ssdeep":"192:HQ7sq1JxgLZsLwOFXuLVUHIjsd7v/ysSOhOxlEkbBOba+2S2DokYj7Wf8+3sWs3a:wQq1XlFXuLcIsD/ysSOhOjHBoavLY3WN","tlshash":"d242cf26782f0bbfb230162e95205ae0de603c7e60510a08bc6d55875ee7f69678eb03","first_seen":"2026-04-28T13:46:17.266196Z","last_seen":"2026-04-28T14:09:52.377683Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/home-swipe1-4afe8cd4.png","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/home-swipe1-4afe8cd4.png HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-7c53\"\r\nexpires: Thu, 28 May 2026 13:45:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cri%2Bemm8vkk8vSgNjqju9E7rXknoMNMenFYK%2FnLfUXv7zk1E6mclwxX%2FhO46QPGW3Law72kA7IluX9JJdI%2F0nKaZlAQy3Cit0kQFkBMDdYPpQYuLWkhUf727wBYHv8l3iQ%3D%3D\"}]}\r\ncf-ray: 9f36827a2f164c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 506 x 230, 8-bit/color RGBA, non-interlaced","md5":"39254919396215278374b7b6b927df0f","sha1":"ad01723244b8b4855e34044c0105d3d14815f30d","sha256":"4afe8cd4c8bd46c09a5d1b4ad3c748625e08ae2db36ad3cb21981693405dc5d9","sha512":"b4678084cacf9295bc0c76705c0568098da85902e2fbc8a3817b2e363ddfdf93f39fbd75ac9483909e9bd4206de4efeabaaad8b5a5b2c8f29f21d9e145c52296","ssdeep":"768:hdEGhPEFvGLdZe1nRXNCPevdtpTFEz5K6s5xH++rHrg:hdEGhPuvGfQ9Vruz5SHRHg","tlshash":"dfe2d094c3405414a5e7c987f78177020334f90fd2788a2a59b9f0a3c5afebca1be94e","first_seen":"2026-04-28T13:46:17.269227Z","last_seen":"2026-04-28T14:09:52.432432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/notify/info","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:51.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"GET /api/notify/info HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nDomain: primexbtes.xyz\r\nApi-Nonce: 44482c1c-71f5-443c-9bbe-794c688b156b\r\nApi-Timestamp: 1777383951\r\nApi-Sign: F224E1A009DAAB1B5DF31027CCABAD0E\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\naccess-control-allow-headers: *\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:52 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AdE6q5rmWx7usviMq%2Bru24XX4krGdtBVjD00du1%2FmVmY1ffMKXkOJOGmzshiO80QZPlegUgAG5Tlx3TsZmX32fPLP0mZ6zm%2F2RTxorazcaNDPNBMvuuckesfriH%2FZCRCauFYfRDH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368282cfc223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6197957a9213545bde5014a4edb51456","sha1":"0a57bea56401fe989f353fc3e4e2355faa1362b0","sha256":"e503f767ef8a2186dbdea5d96de28db1087c3d1431c140f2be4842d1d1c3d323","sha512":"92966e48927b0ff2a8b8b104f266662bac345faa10b4166f0ba7be60542cbfaabd9e53b24f4a718cddb6189fb3b82acea4831ad601d9d2d4fa59c3a9cbb05cba","ssdeep":"","tlshash":"38900214580c18030945464465552600169e59932a128ba94c5c9731649406c6221959","first_seen":"2025-04-20T07:15:57.197947Z","last_seen":"2026-04-28T14:09:52.371462Z","times_seen":23,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suncor111.oss-cn-hongkong.aliyuncs.com/coinlogo/1747036675-88222529.png","fqdn":"suncor111.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coinlogo/1747036675-88222529.png HTTP/1.1\r\nHost: suncor111.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 1275\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA11B1E8233333B257CE\r\nAccept-Ranges: bytes\r\nETag: \"1D32AB303E5B024DD6DD15449DD28D57\"\r\nLast-Modified: Mon, 12 May 2025 07:57:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6028161281793431140\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HTKrMD5bAk3W3RVEndKNVw==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1275,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"1d32ab303e5b024dd6dd15449dd28d57","sha1":"8cf538aae8d9239daf914a82ced2eea320f6fff8","sha256":"347f9990bef78cf715542293d241c5466707a9fd179f4e0ad8009372208b43cc","sha512":"eb6dc4fb0eb06aa6975d9cb0a2186a2029bb6759cc261e2f213e328e17128a2defd9fd1921b47a47ecc659af79f897b78d93de1fce1c00622c1f2e881694a4fe","ssdeep":"","tlshash":"fc21963d0280cd168930b37f4e770d4466ecc5af5cf049ab9c1a4cfc9c675e9902028e","first_seen":"2023-08-18T05:10:02Z","last_seen":"2026-04-28T14:09:52.415399Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1949,"timings":{"blocked":831,"dns":1,"connect":277,"send":0,"wait":282,"receive":0,"ssl":556},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/more-item4-3ad49051.png","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/more-item4-3ad49051.png HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-31f4\"\r\nexpires: Thu, 28 May 2026 13:45:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqd0vkef32oKmEbz5V3drm490kUnEmn6%2Blbddb7Rnr5wQZmO5DKfYkyo7i3g%2ByTjaVZR8Zw9OtRz2J6Ne0UC6UXNJQtQjpwd0NbmTU9GEYSIIu9zTgUfaJYAGob2FqImIg%3D%3D\"}]}\r\ncf-ray: 9f368279fefb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12788,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"c7bc7fc27a8cc99f484c1b799de16c1b","sha1":"9ee3604ef8dcc2534023693305026cc12b20455a","sha256":"3ad49051f0c555b18eea7b196c10fd12b87984e052b97880b8426c766f74b285","sha512":"d148fb9caae77ebb96da23d573f6ea38dc9e9abfb20e3a0458e4b5a9d0f53c830590cb967b3b2d48ee8f391981db69b5328eca847530c2ab20c96ae49cb4d587","ssdeep":"192:DIfdj9EuNS3kiUWgYiIx6LU5J/XeOWZ8CGL8PWU4DBxVBMg8kw8lbQ6ENZl8rEU1:cfdxNs03Y2Y5SjPWhBMhkwOQNZAVnqo","tlshash":"6c42c0f567cbdbd2c635124563f61ec34ce10e201f869638b701e089649f86879baf1b","first_seen":"2026-04-28T13:46:17.275917Z","last_seen":"2026-04-28T14:09:52.429153Z","times_seen":2,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/index-03445c78.css","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/index-03445c78.css HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-1dc0\"\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWE8WIUnnZifNFPnKWEQnDqwTNVaruJ%2FFwu%2BkcIIrqJHWQqmNUCdA9UzxVEOX%2F0W8OCPtlnr8HmCgMyVyMqHcz5OmyTv%2FDi7AxhqWcsNA%2FAHzgiBrpQYNwid7zsBdj2zaw%3D%3D\"}]}\r\ncf-ray: 9f368273fd4e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7616,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7615)","md5":"2d71d7bdda51f439b61404d25b7940b5","sha1":"c2dfabd70eab8bf6ced0f01ea991a4da2bcd487b","sha256":"03445c7808a5ee7d6b96660ec9060c059659e86e01759625e9b7334f1aff475c","sha512":"f772c9a702394de900fd7bd715731f49635befc14e519abecf50eeab8105085f2993ccedac0c2452050f86babda508b4076c41b57a46ce51db098f649e4988c1","ssdeep":"96:bGUGuNj0ewNJel++DeTGzCejTPQ3bE7VWv5Kv7rL:NNjwNh+yTGzljTPQ3g7Vw5Kv7/","tlshash":"f4f1ce45b214262b772fe57e4a9c856b3a41ba92c597dbaffe1170369c8f2e750f0010","first_seen":"2026-04-28T13:46:17.278173Z","last_seen":"2026-04-28T14:09:52.385984Z","times_seen":2,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/home-swipe2-aa9b7585.png","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/home-swipe2-aa9b7585.png HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-a211\"\r\nexpires: Thu, 28 May 2026 13:45:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UP3gGUVTtx0UASw4m9YxZUJXdbyOvVeXz9j5CXmyWn0ZDicoiHVaUrmM2h9QIooYzOQa%2BXUtei%2FMPUSvKtuFFfD1vLHicb%2Fp6t0Tee4BVP0UxsVCO4BQzlib13Y5qCVd2g%3D%3D\"}]}\r\ncf-ray: 9f36827a2f174c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 506 x 230, 8-bit/color RGBA, non-interlaced","md5":"da2a4d083da7a9ab6d0be7ef60390371","sha1":"7897020ddeb1fed2f164aeadf622f446b03d29db","sha256":"aa9b7585ab037d6636977491faf11d7d3726880e0d616ac604aa8eb41c870d40","sha512":"519c53485a264a60385741903f50342336b82e4955eb080017c1d9f8de5f1197b479b0f032fd43c9e1d0f8ea6057907c50383a15d9d95ed4125b71c5ead75cba","ssdeep":"768:dMPKREfllx0sL5sp/2WxXwYcMxiPmpck77UfiuqAxn9Wn3Gc9qZGbPIz:dIK4cestdXwYlxACpPhuF225iPQ","tlshash":"5813f1e01bc08c6f74064593124e413ea63a6a33ab5e35c506dde72b053e6db39d6b8b","first_seen":"2026-04-28T13:46:17.280314Z","last_seen":"2026-04-28T14:09:52.421756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"suncor111.oss-cn-hongkong.aliyuncs.com/coinlogo/1747036671-90100489.png","fqdn":"suncor111.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coinlogo/1747036671-90100489.png HTTP/1.1\r\nHost: suncor111.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 1702\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA11EE240031389A68AC\r\nAccept-Ranges: bytes\r\nETag: \"4C4D57C1D7CA3D9BD51228D5DCC644E6\"\r\nLast-Modified: Mon, 12 May 2025 07:57:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4414127477784661426\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TE1XwdfKPZvVEijV3MZE5g==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"4c4d57c1d7ca3d9bd51228d5dcc644e6","sha1":"5f40a6ad06d708d9db8d21b467005e629a0ed118","sha256":"74d73937f2fe95030e85d95950291ac6d37e857d1080c809231b9fc347ad5abb","sha512":"8ba08802053dc1c1ac2dd8e32b7499eb69229a8f35cdcf74313df912c1913ad959cf0ebdb3ec16b401e763921eed7a3f2e0556d12027ed8f33f6dbd732243cf2","ssdeep":"","tlshash":"4831c86427ffed548923a34322815c75b667535da04007d9e6815fa47f32ec061a066b","first_seen":"2023-08-18T05:10:02Z","last_seen":"2026-04-28T14:09:52.391462Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1952,"timings":{"blocked":833,"dns":0,"connect":279,"send":0,"wait":280,"receive":0,"ssl":558},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/otc-b3b05e54.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/otc-b3b05e54.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKwHo0pPnNlHwGhMHDrFbJVDkqg2LiL7W5GiFOphvId1G5OVh6ieo5WNp4QgCBbQcsijkIY9ooBUrO2RjCgaF9PkZuQYfGP%2BWqFMyr91EGzhPnWKKlWtE1cKO9Wr88giAQ%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"69de9d90-174\"\r\ncf-ray: 9f3682740d584c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (371)","md5":"000482caa81374112b7ec541cdfcec26","sha1":"6de5c2ca95d9e4952aff83289e09bf85be04560c","sha256":"023e7d74328bf6769ae478c485258af0500da1ccc9eaf2508ffc2a2d53426a25","sha512":"e3c1d02ebb3d8548ffd7b5885baa063b1a18fab826ee80643e91c02ef65d6b3b65f308296b6bfec0c5bde9fa9c1892df3cf33b83445982e384f263af6ce3fa4f","ssdeep":"","tlshash":"6ee0d84bd296bf71a67c023c2c1728864288354d4ad711a38853917001bcdef304fb64","first_seen":"2026-04-28T13:46:17.224526Z","last_seen":"2026-04-28T14:09:52.376294Z","times_seen":2,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/assets-02c1e9d7.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/assets-02c1e9d7.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYjXETBGGj7fymikD8C4EXeFUXZJbiNpwPfpuIqLtutlDY8LecKXRpIde%2BpcdBXyc%2FAT2TiVurMp45VKdr3DxiUx7FHKE8s9yLqa1vyxSR0ErR5oc7W1PJuEOM1tXCv6hQ%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de9d90-d8\"\r\ncf-ray: 9f3682783e604c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"088515e3f03a2fef900a4c4933177d06","sha1":"cdca089e25b07ff69a94b9c134bce260645fdeae","sha256":"08f0b896b8544cd8bd544a75066b2373bf417d9c7fe6b5c22143d04b0262da99","sha512":"3349f4c42296bb9468a09bbd737d638ff1b06970550bc21565b3608cc2899ab200761266f2e098a02485bbad4b6ca51548a597cecb3a8f25c783c2c4b69b0ba6","ssdeep":"","tlshash":"1ad0a983026cccf074224b3ee929080295b12a686a0a08a0423ab2b0b2304f6d186ab2","first_seen":"2026-04-28T13:46:17.243923Z","last_seen":"2026-04-28T14:09:52.41134Z","times_seen":2,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/utils-b8618b0f.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/utils-b8618b0f.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HsPJXjdKFzdG2zYK9P2ZJ31Dp4g4trk3Px%2BNskAvLIaT%2B%2FHLkV259nkQuCa5J7HoG4UgAYq8AOW97Gce0qkL4x6XSj2mMyjvPj%2Bzh9zgd6w8K8SE7%2BCXk3xFUl1bJ%2B8%2BpQ%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"69de9d90-44\"\r\ncf-ray: 9f3682740d554c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2f3be5096abe5e81f5a5149c929b7faf","sha1":"0a5004e13af6aac128e2077441e9be2cdf110525","sha256":"23c9b1f05bc56b87e9f6fd3f4d60e56686f688a2ad8e4f682186359a1420c037","sha512":"bfe4179156cb4a971f53dffd28cc6e3e2f4f6501cbcd3282b8ac1f7596d980a2c3d97c76f7fab1ff2439f72267e9230d669eff3813951d6da014fa44b7ff11c9","ssdeep":"","tlshash":"13a0024e4525c0a1c3595485d234de605431dd7d361131e400d98f16cbaaec7d55c590","first_seen":"2026-04-28T13:46:17.222241Z","last_seen":"2026-04-28T14:09:52.405553Z","times_seen":2,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/home-swipe5-b15d5ec5.png","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/home-swipe5-b15d5ec5.png HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-10c8e\"\r\nexpires: Thu, 28 May 2026 13:45:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeOyEiyZn%2Frste3S%2FIjiF6b%2Fn6ayRCrqt1mwZ9cnBvOWb5ZVMg4PiY1AhsLeJnCmQcV2JgZ7xO89VBPatnN%2F8s2Nrif%2FFhKlQEGkYU3x82Q30%2FSg3jer%2B7FJJ0WkoGQRLQ%3D%3D\"}]}\r\ncf-ray: 9f36827a3f1c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 506 x 230, 8-bit/color RGBA, non-interlaced","md5":"4d358c2941168b17db8bd22eb217635f","sha1":"a31cb3c006d3b02bb19026ffe5d97ee591580362","sha256":"b15d5ec5874f8fe4e7af1c797d1ca8a4fc36e49cabbe34e216a0a448fa28703c","sha512":"2f827ee13b6a1243f1a65b43d898841ee5a097c0d0882bc6b5e7a5647cfdbbd490154de42b78f2a46467183f6311fb7d25bc588a8856fea68ff3e3be105cf9bd","ssdeep":"1536:9XTEZ31SQZ1dB4EGuMfzGVKR1zuVGJzPk89/Z1joSU7ACBE5:9XT431SQjdyEGuMfaVKRpuEBl/T4ACBK","tlshash":"e363023a4c4694884e2dbe8589b65ff2123136b51ca1891645fed8c39f82dcb7de4f23","first_seen":"2026-04-28T13:46:17.284991Z","last_seen":"2026-04-28T14:09:52.39353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":384,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/notify/info","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:51.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"OPTIONS /api/notify/info HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: api-nonce,api-sign,api-timestamp,domain\r\nReferer: https://primexbtes.xyz/\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-headers: *\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:51 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fqQwjH7u0dtRRrYNwkrS4%2FgPIeEWK%2B21luGC04O4mxzyvu7P6XPH%2B69gCuDDnmQ6vpOwJqP0oVx8hAEaP63WttoswiO56Qk7KHFpqcqwAYjvGl7wn2EOo8tMIwJYpjOYHjgsBEgp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3682810f5b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T17:24:07.120456Z","times_seen":14335314,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suncor111.oss-cn-hongkong.aliyuncs.com/coinlogo/1747036673-600166065.png","fqdn":"suncor111.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coinlogo/1747036673-600166065.png HTTP/1.1\r\nHost: suncor111.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 1746\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA118B90443238ECEBD7\r\nAccept-Ranges: bytes\r\nETag: \"425BA65D97284D9FC74DA99E1A3C5252\"\r\nLast-Modified: Mon, 12 May 2025 07:57:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 634014512028161199\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QlumXZcoTZ/HTameGjxSUg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"425ba65d97284d9fc74da99e1a3c5252","sha1":"fb2d37ea13f5504aa7fd8f0a0c707b56b6efa633","sha256":"73f84cca79d201ad8f6c480d4311189c2aabde65aecd6f2eb1fae2d8c82ec3e7","sha512":"72adb6c59ef7aa96c3dde2a00ca1eb04425b01b8a8dfdde3fc7de8ad9d28237044e3065489cc9bd783f58afaf4bcb24d04a1da37297c66261d7faefb977b63bd","ssdeep":"","tlshash":"e9315339b7118da5ea06bd3b81fc483d2a8d491ce2c66e845dfacf9242f305798080d3","first_seen":"2024-08-20T08:35:39.451874Z","last_seen":"2026-04-28T14:09:52.384951Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1971,"timings":{"blocked":837,"dns":6,"connect":281,"send":0,"wait":282,"receive":0,"ssl":563},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/config.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:47.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:48 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ETxd%2F48S%2BOjMk2vltMaMJAQtE55E5stARAJKFPvGWvivoNC1Op5J%2FeBMhJRmA3AFzSaJoSItXdm28N9P0rSvGeWC5wS%2BkBplFqMDxPrDm1JR0xtxm9uucEFMXlkjHMzx0w%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:02:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 01:45:47 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de9d6a-d8\"\r\ncf-ray: 9f3682690b194c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"1026c81fd20cae5b83cbcae7f99fc729","sha1":"47816e14feff0a5a6bbaf2dc0bf3ca8b539b7680","sha256":"44747c4d71ead765462b6896ecc8902f5eb570f8abbe0f074237564a495146c1","sha512":"eb8659e43c0cdfffb71717e6d0fbf8b98a9fe82a1879ccef3b9c5bf2fcabe46de52ef9db8b0468b7391c090e2397840b09356576ddf6864b2f56ca3e681e84cc","ssdeep":"","tlshash":"95d0a7b9d830352101001cf0c0ba19e15243363bfd40c5eff05afa5d6d0b7534962d81","first_seen":"2026-04-28T13:46:17.286917Z","last_seen":"2026-04-28T14:09:52.438228Z","times_seen":2,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"admin.dabaopong.com/chat/socket.io/?EIO=3\u0026transport=websocket","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"GET /chat/socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://primexbtes.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1xFCUq9Z5jUHwXcWYQ0Irg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 28 Apr 2026 13:45:50 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: wByo3gcLhZCul1Qv52GvD3joAhc=\r\nSet-Cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=f4Kw3ZxT%2BcXy%2BX%2BNdEnZlaWFTzYkIlowQP0GHhQ0DOf6YPOH7jPVv6avykmfc%2FDXmy3mYxjsCX9366ewTFkomh%2Br3%2FoqerUrBO5ISUATvX59OSUteZvbgq3j8cd3tSSpvp9ZRlsB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9f368276f9f30883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=545\u0026min_rtt=512\u0026rtt_var=159\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3191\u0026recv_bytes=1330\u0026delivery_rate=6972712\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=f23f0198b4dc46f8\u0026ts=413\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T17:24:07.120456Z","times_seen":14335314,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":401,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-9df19bb1.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/quote-9df19bb1.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fHBsBJRp8HuTdjwu49YfyQ2ZytUlAOd%2FFlZkq4O8i5KII6PEjcLKhTdbYvb8VAajm6O%2BNTGigL006FrdfsVixC9T6bhaKhBq61l3VSWUv4LcBy5Iwa8CH7ta1223NAYoSg%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de9d90-14b\"\r\ncf-ray: 9f3682782e5b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (330)","md5":"500d7afdf2d401f188e63a44d849ef8c","sha1":"be4c91423ec80517321c77f70850b38cc681a66d","sha256":"1788f0e73f47d10dd523a561899835c6489f60ab89d3406538a5136c69d3c73e","sha512":"a7198de34cded813a8a119a98b5140ec9b533bfa915c2d41338a4c1ea05c54a5388615b2b24821e1bf46f31c268a73d85b4f5e195cfe5c7d4981acaa6effccf1","ssdeep":"","tlshash":"dbe08c1344f67da3442d27889d319c0028cea31ee5be2281484a333ca152843329e72e","first_seen":"2026-04-28T13:46:17.241646Z","last_seen":"2026-04-28T14:09:52.36517Z","times_seen":2,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/trade-018cf68b.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/trade-018cf68b.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-402\"\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2BYBFv13APtwbm217TTepiv7n3%2Fci4FXfLCy6QOXPbmuCqqGrdssVcjXtUixaz9Usa10ctH1wNhV1jSvnBqP2%2BQSJnsQS8hF7UvDbV9%2BJQu2rHsZeiVYmqsKIRQQE0NPWw%3D%3D\"}]}\r\ncf-ray: 9f3682783e5e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1025)","md5":"534d0b1b9ad7aa7883d37da72d8eebdb","sha1":"52d0d851e051c18be48b24cf73d191c9de1a6b14","sha256":"27c900096967c575fed23cb6cc8154bec00764bf9f966348913850e8b0b4805a","sha512":"a0ac826c48476387a19ea45508327025e08e578c0226ad6bbb7620b05396278b345591707f21db2ebecc964e7f9a9e1ee21f2baf4b6e01cbfff3cb2e7f948e1d","ssdeep":"","tlshash":"1a112c1f8542bc30a872f76cd4f85e964071329ccb9ed8f5c825813d22749d5e47f984","first_seen":"2026-04-28T13:46:17.288064Z","last_seen":"2026-04-28T14:09:52.407253Z","times_seen":2,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/number-4205aaf6.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/number-4205aaf6.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVGHKUcKNg6wfA%2BCdu9WPrP5LM3qsrIRUGS4dlRgy0SpWQnjGEiHDR1QhTr%2FlKFKHs9tlBcTWbUMrQyrDNv0gj4rcL%2FrKePqAwFZ5Eb5LBygMYwYoYKpqBCOIPzAV1bi9g%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de9d90-89\"\r\ncf-ray: 9f3682782e564c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"db54da145c7fe14bcc3416dc2fee9d4a","sha1":"2108e092f39fb798076bee52ad81ceecfeb675f3","sha256":"9157ab61151597b97b4eaec6d4cd8d61cd058c67abdd8409e6aea1d5d1d19885","sha512":"4235b4e512d5892e52f43e59dd4a025b6b664de47130280ac63f2204cf48f5e50f7a5ce9c41cd9d59e7a211d0aabfd1161c3d2da54fdf2064cbfcca8e1b6c0a1","ssdeep":"","tlshash":"a4c08c8262877ef0270382080422d4042ca0afb86b16ca8844020507bb162a80409909","first_seen":"2023-12-04T02:29:51Z","last_seen":"2026-04-28T14:09:52.387596Z","times_seen":11,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/etfs-3c0f4599.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/etfs-3c0f4599.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lufeFFvgVaggo3RanGsph8Dz7GXk1x76Jr42VNq1Zel%2BKsx%2F%2FLpNjSh1F6dnTxy0tDa163JAr03dQnetjJuCfMJ0C6gHgyqfK04NgATCtJYeHbqgo2hKegv0QXbv9ZVBvA%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de9d90-277\"\r\ncf-ray: 9f3682782e574c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (630)","md5":"8f086bf0f7a0585d2cf2a06cc4c52073","sha1":"9031215de8e59dcd354ed79225224ad2b7d0f806","sha256":"4858ab3d38156c4399b7ee8c1ef2b594caa679c63b15832df3facacd0432e48c","sha512":"c3ede138917a67bbe37f1657a85efa0e6d967a84099775dab7ff505a0e28185d92357b736d275859cb1740844b4d5cf106caa99e9503a4857f7d5e840c0ff12e","ssdeep":"","tlshash":"8ef0f9aea067897d8359394183575f6c400a88643cbc49f1eaba6c0f879e117ccf5f41","first_seen":"2026-04-28T13:46:17.26305Z","last_seen":"2026-04-28T14:09:52.396923Z","times_seen":2,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/more-item1-498cc860.png","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/more-item1-498cc860.png HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-3600\"\r\nexpires: Thu, 28 May 2026 13:45:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITshlzMclgHWQv8ujO5NLQIdiT%2BS1vgVjnCN0yuuOhr3yySsA0c9%2BbGsBskcpGAFQQdRMs4VDeGVeBjbQyMP6wIqjff8E59UQn9h1y33ygm8mZFVDTYmkB%2B5fw2mnpESBQ%3D%3D\"}]}\r\ncf-ray: 9f368279fef54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13824,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"54b309ca40fb8f7463c65806679bad03","sha1":"deba43ce782598fe90d2cc8ffa46e26a8da5da2c","sha256":"498cc860976ff687ad1f34828c03937c40cb455435a3d0d6340f899ecd3444a9","sha512":"131a9e37c5663199714e3e23f200f033ed426d6cee4f374d979e6285aeb3cd3ec12fd8f3bfbaeddc61010170c908b01ef6f628afa937fd91dacb5d9020acf852","ssdeep":"384:KhyUPS+Y6GOL1AKl1e5waoEK22hQ8kV/57jm+/:wfLOSfFUTp","tlshash":"6752d0d19409ac75b1cb129d9b3898d4dce102253f0d0aad92afdd2f263ec46dcd1b36","first_seen":"2026-04-28T13:46:17.289152Z","last_seen":"2026-04-28T14:09:52.426616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/more-item3-3faea9dd.png","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/more-item3-3faea9dd.png HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-4090\"\r\nexpires: Thu, 28 May 2026 13:45:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5oe2QUHVpnfo24m7Hbo95dgxrTw6k613uJ9S9oR%2F6Kk6hgC6%2BhZgg%2FMX%2FlCpWEgQV1UftGXBO%2FGJ8VbQvZ0xHbNcis5wMacH78dcx%2BaUMIQgrTr3fvOF%2BGcQvYSY2Q7iw%3D%3D\"}]}\r\ncf-ray: 9f368279fef74c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"a4237e692bda499bbbbedd037d675f6f","sha1":"2fca108182738c537e279f64632cd4a519b3d1d8","sha256":"3faea9dd93a082cbfceada41274495a493c29ac3edf1ab3704311aeb0133855a","sha512":"2c8c5e8cbd7b84aa7abb2ec6e2955acf770a4e96b47259421e4933ed4780514bd94a9b3a3fc25395573a7b70363af775b870847fcb76448e290610ae63aa2d83","ssdeep":"384:mXUr6nJbEGJjS7wbsqu9nsdl8TOu3gWuZ3xEhKYDd:2vJbEGJ+7P9nW8Ku3gpZq","tlshash":"3572d12277069eceea5db01dc4390712d0fb667bbab0071a1184566199ccae0f5f0e7c","first_seen":"2026-04-28T13:46:17.29087Z","last_seen":"2026-04-28T14:09:52.419309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":392,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-3e30530c.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/quote-3e30530c.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-a37\"\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=diZQOcbUmenyM30FjWmu3r%2F1T03Y6w6rTlX2FPquoDQSEbgdOjYurp2%2FQXd%2F6LV7139a%2BFh8CCSVEhqHmSQuigEfqrlIOeYIGlTK3IHGFL20jYEH7Xc6IMZEh5VfQZDEgg%3D%3D\"}]}\r\ncf-ray: 9f3682740d524c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2615,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2614)","md5":"5bd8575191acda30f4a4e6f3e9c76cff","sha1":"df0da80d8ca136032da4212e541732f0c42e43be","sha256":"f28234552ae2a6fd1693174e6c4084338694649dc6bfb9a363005a789e60d06c","sha512":"78e7623d8543eb94d1f44ce9d7e1013debe4bf1ecefb206d85bcae612acca87aa16809bc6e62deab39aae3d7556b3d9a53836136903f4ec13e1334c6d7b60add","ssdeep":"","tlshash":"7451b70f34528074f3b94feb996852b141660b2976a189c1764f2e50c3bbdc9d867f23","first_seen":"2026-04-28T13:46:17.196937Z","last_seen":"2026-04-28T14:09:52.36272Z","times_seen":2,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-f8cbdb69.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/quote-f8cbdb69.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TfWKM87pzyBLl1n5LygwfwdHrX2PTcG%2B8VmZ%2FDWsF8PntjgqqfD4Y%2BDaGjybsAyN8tjckiuHfDEukVAD9NYdC910YCAccHop8EXIqUUB8GzR7SOBshmU8cDL4poca8skqA%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"69de9d90-39f\"\r\ncf-ray: 9f3682740d564c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":927,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (926)","md5":"62270de25830017638068bda7bf73ef7","sha1":"1303cec6372bbe2d5b3b8e0e3f376d6ae83b0e2b","sha256":"7fb8213b3f3a059d1405f1395b31d6a9d30d225b253b6484ebe731765f739ed3","sha512":"519cf22a3dfa4af39a9ff31959b90b0e3918718227ed8772addfd20450eec5e05c96f80063fbf7dcb71c3d966c16b12644f16195b0346d284815385ed90192da","ssdeep":"","tlshash":"c1113a5ef8e860f184241288d2c50465675e8e58e3fac1e85c6a4bb69ff0d09e19fa28","first_seen":"2026-04-28T13:46:17.292987Z","last_seen":"2026-04-28T14:09:52.369457Z","times_seen":2,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/config-95799068.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/config-95799068.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2kqPTjbhk5MRB5cVg6JxBYSSlco68%2FcteewYhaETRAGDJfMj7E8Gw8yk3A0I49znJuNs%2BzEcQzNsPKUuIba6h4fgLubDPgxAOZv1IxuJOLvfgt8Vwh6F2jwIYCYVtfFDPA%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"69de9d90-330\"\r\ncf-ray: 9f3682740d574c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":816,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (815)","md5":"b86934490f01c4382e4c46d773884e1d","sha1":"4eddedc7e28e8ef022de84fa9253480ff1b5f08d","sha256":"de2ed0a7f21cd64b747ab4a4d3cfc786784310223389b9865293c0327539a553","sha512":"2e772a1c849d6589f1d6e208193d5a06197e0d3a577b0208ac31a3b1402f8e432de5219f66470fc1011271225b8681b70bb84c65a58799e2a4888a40516b5cea","ssdeep":"","tlshash":"76018c057264747328684bc5e04504b20b212bdc6b4be3d4b07f473921778c1b12af25","first_seen":"2026-04-28T13:46:17.24652Z","last_seen":"2026-04-28T14:09:52.367241Z","times_seen":2,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/trade-018cf68b.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/trade-018cf68b.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-402\"\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2BcA7%2B7frHgoo7MekVmnw4Bpp%2F%2FenrfCdJNgckJ3PZWi4M%2Bj%2F6jg2EGlhCrFTuvg5anvzy%2Fv1OhMAbg%2FdIjS4b2jATAkaK3iLDr7TMfSXLE8JW%2Fqh6QjnqPc%2FjCL60y2xg%3D%3D\"}]}\r\ncf-ray: 9f3682741d5a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1025)","md5":"534d0b1b9ad7aa7883d37da72d8eebdb","sha1":"52d0d851e051c18be48b24cf73d191c9de1a6b14","sha256":"27c900096967c575fed23cb6cc8154bec00764bf9f966348913850e8b0b4805a","sha512":"a0ac826c48476387a19ea45508327025e08e578c0226ad6bbb7620b05396278b345591707f21db2ebecc964e7f9a9e1ee21f2baf4b6e01cbfff3cb2e7f948e1d","ssdeep":"","tlshash":"1a112c1f8542bc30a872f76cd4f85e964071329ccb9ed8f5c825813d22749d5e47f984","first_seen":"2026-04-28T13:46:17.288064Z","last_seen":"2026-04-28T14:09:52.407253Z","times_seen":2,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/news/detail","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"POST /api/news/detail HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDomain: primexbtes.xyz\r\nApi-Nonce: 79668113-063b-44ba-a2fd-ed786c91e484\r\nApi-Timestamp: 1777383950\r\nApi-Sign: CF6E2C1E3A0E05067D727B5230005C8B\r\nContent-Length: 8\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"{\"id\":4}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\naccess-control-allow-headers: *\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:51 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsJVZjLeEPZkuqO8wPfeJSNW6liRrFxt2NOS%2FRywNcAOBZ82rufCtwoS8hgdPla0pw294lha%2FXuAR%2BSYSh5LHBeiH64DRoOYk2xXyRZ2PRhnSboWGGuVkql3%2F%2BhwDcUAq5XrfFDK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f36827d7eb823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":406,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"51ba04754c328b7a701ddc4d529cdfad","sha1":"8e166032739466be062ef1b15f563d286c1ee587","sha256":"c045bd2ae3c69d0645c6715136acf8641aa2f6d8062743f16dfaa1e7ca5aaebb","sha512":"023265df2739cc0c2c7c822ec503f361bc0722d69b1004d1a1d3cb0e32e94f8276cddca3bd1a3ca405185ba519edaa303c2aee259c9158ae1301b51eadeb583e","ssdeep":"","tlshash":"a9e02b691d29cd459bd563c40caf3a99d5adb1024c904f4ddc15c65cc1a9174498b229","first_seen":"2026-04-28T13:46:17.294883Z","last_seen":"2026-04-28T14:09:52.38011Z","times_seen":2,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suncor111.oss-cn-hongkong.aliyuncs.com/coinlogo/1747036677-860621067.png","fqdn":"suncor111.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coinlogo/1747036677-860621067.png HTTP/1.1\r\nHost: suncor111.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 6211\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA12E613583937604794\r\nAccept-Ranges: bytes\r\nETag: \"0D399F29CE6E84D11EFBFB3EF61C5334\"\r\nLast-Modified: Mon, 12 May 2025 07:57:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12774659260203443717\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: DTmfKc5uhNEe+/s+9hxTNA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"0d399f29ce6e84d11efbfb3ef61c5334","sha1":"599cc7d39727dacbbd49a2c697158f249f9267e5","sha256":"bed2813abdf0f2174b43bcc4e7f622a523761de7555ef763302a051965fcfd01","sha512":"434f5583338e80b2d28c1f0f5346f0ea4db7139e8298d5f047c41d6433cb7663a49f5aef7063312dd67211996d28de384ad21bc1d4315a7003362454cd9aeea4","ssdeep":"96:PA6KoylMEaLEK6soyNioP8T2bwcF3gef35+qrzHVKgs+1SMhmaj0jpsGkc:fKoS8boJSwc/5+MrUj+Rhmaw1ss","tlshash":"11d18eae6f7c07ed6cc9135f796317ddb9458e089dfaee00a40a649a1a07630b8894c3","first_seen":"2025-09-25T19:51:44.066026Z","last_seen":"2026-04-28T14:09:52.396158Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1348,"timings":{"blocked":1077,"dns":0,"connect":0,"send":0,"wait":270,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.dabaopong.com/api/notify/info","fqdn":"admin.dabaopong.com","domain":"dabaopong.com","tld":"com"},"ip":{"addr":"172.67.208.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:51.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dabaopong.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 11:32:54 GMT","end":"Wed, 10 Jun 2026 12:31:16 GMT"},"fingerprint":{"sha1":"AE:37:EB:2F:EC:67:29:96:57:95:DA:58:A6:02:30:3B:05:1C:46:10","sha256":"BC:06:05:36:4A:FE:4B:AB:34:BE:1F:C9:6A:05:03:20:55:87:DE:71:DF:B6:D4:FD:CF:22:98:E3:7F:66:05:28"}}},"request":{"raw":"OPTIONS /api/notify/info HTTP/1.1\r\nHost: admin.dabaopong.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: api-nonce,api-sign,api-timestamp,domain\r\nReferer: https://primexbtes.xyz/\r\nOrigin: https://primexbtes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-headers: *\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Tue, 28 Apr 2026 13:45:51 GMT\r\nset-cookie: server_name_session=3206532dbd76dfb4d2b2539084b8d216; Max-Age=86400; httponly; path=/\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UbFufcF7Ge7Hd57y5XIk%2BY47u%2BXM9eRCIzjqHrUlOiV%2BexJseej%2Bejv5PyhG5XOvbArysUuo3x2rStFLNy0YHwoluwzb0LI%2BibOxwBqtvck2kDkx1IAg5pZOtiA3pR2wRUNDmzZL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3682810f5a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T17:24:07.120456Z","times_seen":14335314,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-data-93472c0f.css","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/quote-data-93472c0f.css HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-2497\"\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fcvokJL2rUr2ShMvHdckBJSmTHu16tw%2BR2NOD8uilxW%2BpwgnTYhwXsz%2Bntugq%2Bnl7W2jQJKkEJrb3OegZLexmqru2Is5w09v9Dv6X%2FGBZpvhnVIJMCQ%2FRxb4NfuUtzschg%3D%3D\"}]}\r\ncf-ray: 9f368273ed4c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9366)","md5":"317aac1795cce12c722095e87decbe6c","sha1":"a335f21b0dc74b8ef8fbac6f453904d2e0a17fd5","sha256":"93472c0f9e243a97ebf8320e6f7e7b0b992579e416a2fbf20e7b9615a0e0974e","sha512":"c90f0c8ab724366dd29565fc2f4842a825a07d3772a7dda266d4c9de80ff8e79e465f9cc32a62e85f568b9120d204b6db8599ec23211e9e378234aee1b01b534","ssdeep":"192:bNj6Nnz7jBpkI1dYcI4Nj4NaczY/y8D+qYCAo8:bNj6Nz7PT16wNj4NacY6e+fe8","tlshash":"8712ee5af01a022f816bd8bea89cc81a3bd0f647cab5974f7f4a41177c8d2c745f4921","first_seen":"2026-04-28T13:46:17.300087Z","last_seen":"2026-04-28T14:09:52.442133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/trade-02c4802b.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/trade-02c4802b.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primexbtes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-db5\"\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nexpires: Wed, 29 Apr 2026 01:45:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfyN%2Bg%2BKUzE%2Ft%2FlW0Uo8uy%2Ftz3vCjEZszdXCb%2BO0hU8ruJ6KOeOQBAXoKAk%2FVUfGL%2BAu1txxYyUs%2Bd8GgVA6DCZft1V8QjXArpJfSFcViJOMWJ5DWkJ%2Fk91DBuM%2FaDu4BQ%3D%3D\"}]}\r\ncf-ray: 9f3682740d534c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3509,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3508)","md5":"d7c3d6af468d6b4213c6ae6e52cb4228","sha1":"8d78553e68aaad9fe9ccb1927f5cd49721022a01","sha256":"31e1024d437c29192ee066b3e1dc9777be7b08328f8928ac4353791c505af221","sha512":"8e04adcbaaac88599eb95829944b7b792a69de3de03dfc9b67f79a2cfde1fe6a7698d1bd9becf87180a29e3368611c782be4880a1579ea4c0e367503a9e805cf","ssdeep":"","tlshash":"8171069d90778b3f8fa43c8ac25b6626911984683d794382f69f7c4ba71e801cd32f46","first_seen":"2026-04-28T13:46:17.3022Z","last_seen":"2026-04-28T14:09:52.398567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btse1.oss-ap-southeast-1.aliyuncs.com/exchange/platform_icon-1762222965.png","fqdn":"btse1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /exchange/platform_icon-1762222965.png HTTP/1.1\r\nHost: btse1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 35194\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA0F269DA8313949D372\r\nAccept-Ranges: bytes\r\nETag: \"384595EAB1E41DFA6EDEA10AB71B5095\"\r\nLast-Modified: Tue, 04 Nov 2025 02:22:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10549327601430368457\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: OEWV6rHkHfpu3qEKtxtQlQ==\r\nx-oss-server-time: 18\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":35194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"384595eab1e41dfa6edea10ab71b5095","sha1":"62287e3bd77e1de69f7078e7854e241cd5add1d0","sha256":"96ffa54eca98e19d2e560a70985db9cf54bdedb2d0778bcc5f6ce2b3ad1ecdc0","sha512":"74ebd9243c666bf134b232714b77eefabf0eeb66b38fc174db5283b09eee574b1899b5ee63ef038ef83b79552a0a47d773d5d3787b6e2df48dcea2ed9c3cc3da","ssdeep":"768:cl27I++UutRpcva9rcYg7+TO5HrEgWlGfqgRUbLdv1Of:co7NyCv7iCtYXcCbJNW","tlshash":"65f2bedcb4077523c6a82f36d4b24100772a445510dbabfa97bca5c8ac66b2cddc7dd8","first_seen":"2026-04-28T13:46:17.303438Z","last_seen":"2026-04-28T14:09:52.382864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1374,"timings":{"blocked":0,"dns":0,"connect":330,"send":0,"wait":354,"receive":21,"ssl":669},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/trade-02c4802b.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/trade-02c4802b.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69de9d90-db5\"\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FeDfMfqf8NchxpxUJzAwcSaBSyC5MqrzF4%2FS5IkZ8KKRsk8bqBrCc0Db%2BGlwVa6%2Fpcbos6PBl%2BhCnwufD8Tzex328%2FWfC40pFqvfkO3C%2FuzcFCsbt42QJ37xREMGJz3d6Q%3D%3D\"}]}\r\ncf-ray: 9f3682782e5a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3509,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3508)","md5":"d7c3d6af468d6b4213c6ae6e52cb4228","sha1":"8d78553e68aaad9fe9ccb1927f5cd49721022a01","sha256":"31e1024d437c29192ee066b3e1dc9777be7b08328f8928ac4353791c505af221","sha512":"8e04adcbaaac88599eb95829944b7b792a69de3de03dfc9b67f79a2cfde1fe6a7698d1bd9becf87180a29e3368611c782be4880a1579ea4c0e367503a9e805cf","ssdeep":"","tlshash":"8171069d90778b3f8fa43c8ac25b6626911984683d794382f69f7c4ba71e801cd32f46","first_seen":"2026-04-28T13:46:17.3022Z","last_seen":"2026-04-28T14:09:52.398567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/assets/quote-f8cbdb69.js","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:50.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET /assets/quote-f8cbdb69.js HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/assets/index-3be4e24c.js\r\nCookie: server_name_session=957b570a5d877206f100ac4279ab8ce4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGPa9VZ4IozluwIT6tprBDiB3OHE1RmlqnS2odKbhmXLL%2BUz5F8dl5JIdI7TamAKY%2BiVl3ar2NFvBYSlUR8NJdObwJotQEhY9t8cn9c1rnMvJ%2Fc6aCCVFYVjlU6E%2By6DLg%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 20:03:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 01:45:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de9d90-39f\"\r\ncf-ray: 9f3682783e5d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":927,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (926)","md5":"62270de25830017638068bda7bf73ef7","sha1":"1303cec6372bbe2d5b3b8e0e3f376d6ae83b0e2b","sha256":"7fb8213b3f3a059d1405f1395b31d6a9d30d225b253b6484ebe731765f739ed3","sha512":"519cf22a3dfa4af39a9ff31959b90b0e3918718227ed8772addfd20450eec5e05c96f80063fbf7dcb71c3d966c16b12644f16195b0346d284815385ed90192da","ssdeep":"","tlshash":"c1113a5ef8e860f184241288d2c50465675e8e58e3fac1e85c6a4bb69ff0d09e19fa28","first_seen":"2026-04-28T13:46:17.292987Z","last_seen":"2026-04-28T14:09:52.369457Z","times_seen":2,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"suncor111.oss-cn-hongkong.aliyuncs.com/coinlogo/1747036675-999117548.png","fqdn":"suncor111.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coinlogo/1747036675-999117548.png HTTP/1.1\r\nHost: suncor111.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 1423\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA12B1E82333331058CE\r\nAccept-Ranges: bytes\r\nETag: \"F335EB7E505B8A588518F37EADCC773F\"\r\nLast-Modified: Mon, 12 May 2025 07:57:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4351070760785751937\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8zXrflBbiliFGPN+rcx3Pw==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1423,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"f335eb7e505b8a588518f37eadcc773f","sha1":"0417e44f39a41110a1d216f766cbcd16bfb2f791","sha256":"840b48160a264ef2b1c6dd9de2581f9255e489218f2db0375a98e73bc1702d70","sha512":"7543d79b03bd92fc60e33f92f10271f167f821b27e1100abc2457c9f1abc6f365113a093dc328e18b2e8a7534af9bfce1ae05beaecef0c9501067aaca3849ed4","ssdeep":"","tlshash":"c321a2fa0ff93edfa907b5e4f77921436b77817e1a406018b2c0c0c077628a991e0318","first_seen":"2023-11-19T22:59:08Z","last_seen":"2026-04-28T14:09:52.38834Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":1102,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suncor111.oss-cn-hongkong.aliyuncs.com/coinlogo/1747036676-742602751.png","fqdn":"suncor111.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.213","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:52.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coinlogo/1747036676-742602751.png HTTP/1.1\r\nHost: suncor111.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 1765\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA12AFAD5B3539F7B292\r\nAccept-Ranges: bytes\r\nETag: \"47D12E3143C5F76DEBB7E00ECF194D13\"\r\nLast-Modified: Mon, 12 May 2025 07:57:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3924177823495834711\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: R9EuMUPF923rt+AOzxlNEw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"47d12e3143c5f76debb7e00ecf194d13","sha1":"49790499937fff0981e480634aa2b203b5026aec","sha256":"3b333895c0cc1abdeeb91334c3ffe7c4a417c0317ffdc19412266274b47ec64a","sha512":"7a8ec19a17380c5a7546c88306495c8a9975f7b79a8d80ceb3f205139cd8b254139e7e3f9f1c6fadf385ff16a1f12a7401f8d11bd554db08c5020397ce0e2a75","ssdeep":"","tlshash":"cd3109f1de71a1a9d11a1832b0287d52b35821ec2fad88037e1da80172d52c9bedb112","first_seen":"2025-09-25T19:51:44.146691Z","last_seen":"2026-04-28T14:09:52.402846Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1361,"timings":{"blocked":1092,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primexbtes.xyz/","fqdn":"primexbtes.xyz","domain":"primexbtes.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T13:45:47.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primexbtes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 11:19:11 GMT","end":"Sun, 12 Jul 2026 12:19:00 GMT"},"fingerprint":{"sha1":"67:7C:DB:38:AC:05:BB:4D:DC:86:B1:FC:9A:35:52:FB:B0:BC:AA:8D","sha256":"98:6C:DE:DC:76:01:12:D4:05:09:86:B0:4E:B5:A3:10:4E:14:D2:4F:77:34:BF:2E:7D:20:A6:D0:DB:C2:59:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: primexbtes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 13:45:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 20:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: server_name_session=957b570a5d877206f100ac4279ab8ce4; Max-Age=86400; httponly; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SAQ51phXiT3fH3eBobxA02QK%2FllWNtS%2Ff04nm18SNKPMKymXo9uC9V7dLa50qPitmu3QCRMm0ZIaUEcWKEz56jUk49x%2FqA30y9UUC59IMGywzmEmcBamIok32LSNVoUU5Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f368265aa7fb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2857,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1222), with CRLF line terminators","md5":"3980f74b19817ea3e0f55b027fb9c7fa","sha1":"700eccdda8cff2c90e5fe225f56d195cb525662b","sha256":"a47a22facdf7ceae2316639e101909aca309f0b258720cf5dbdf60a109306d07","sha512":"a460afdfa76dc7e8a1983eb916c01e1476d2b7bc92806e9daa9dffca0aef9a38071256002e255f752b2992dcda3edc963f77a21742969c9c918b34d37b9a5490","ssdeep":"","tlshash":"b6512fa30b009c3e33314134d2a37654a32f2447db4a6469b57c2ab94770eff856f6b5","first_seen":"2026-04-28T13:46:17.309353Z","last_seen":"2026-04-28T14:09:52.392202Z","times_seen":2,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":93,"dns":73,"connect":1,"send":0,"wait":391,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"primexbtes.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btse1.oss-ap-southeast-1.aliyuncs.com/exchange/platform_icon-1762222965.png","fqdn":"btse1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primexbtes.xyz/","date":"2026-04-28T13:45:49.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /exchange/platform_icon-1762222965.png HTTP/1.1\r\nHost: btse1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primexbtes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 13:45:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 35194\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0BA0F7CC77535339F0E1E\r\nAccept-Ranges: bytes\r\nETag: \"384595EAB1E41DFA6EDEA10AB71B5095\"\r\nLast-Modified: Tue, 04 Nov 2025 02:22:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10549327601430368457\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: OEWV6rHkHfpu3qEKtxtQlQ==\r\nx-oss-server-time: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":35194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"384595eab1e41dfa6edea10ab71b5095","sha1":"62287e3bd77e1de69f7078e7854e241cd5add1d0","sha256":"96ffa54eca98e19d2e560a70985db9cf54bdedb2d0778bcc5f6ce2b3ad1ecdc0","sha512":"74ebd9243c666bf134b232714b77eefabf0eeb66b38fc174db5283b09eee574b1899b5ee63ef038ef83b79552a0a47d773d5d3787b6e2df48dcea2ed9c3cc3da","ssdeep":"768:cl27I++UutRpcva9rcYg7+TO5HrEgWlGfqgRUbLdv1Of:co7NyCv7iCtYXcCbJNW","tlshash":"65f2bedcb4077523c6a82f36d4b24100772a445510dbabfa97bca5c8ac66b2cddc7dd8","first_seen":"2026-04-28T13:46:17.303438Z","last_seen":"2026-04-28T14:09:52.382864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1373,"timings":{"blocked":-1,"dns":0,"connect":332,"send":0,"wait":351,"receive":21,"ssl":669},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}