{"report_id":"46921f46-8ab3-46f0-a95b-2b5f0e836f27","version":6,"status":"done","tags":[],"date":"2026-01-24T20:02:29Z","url":{"schema":"https","addr":"chainusdtsaving.com/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"title":"USDT Savings","dom":{"size":22470,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15636)","md5":"1d9022ace26a6495e8be64481187ec28","sha1":"7644770afb955810327f95f712b64a30015a6714","sha256":"cb89fba6f6fbdd805ca2df660af1487587bceb070445b45609d8583b276e3a11","sha512":"ee9bccfb034e4d56825604cf7ef4f1c71bcd1a49073c1a358901715203bc4655e19c4c6855688d2320bb91beb5159e28330ae4d712352c5f95b4ecf4c33cb007","ssdeep":"384:hm6cl4ZCxI2xDbhzFV23FbF4FuVFnFO/F9K5fjjUcYdn3x:hmBl4QxI2rpV21hIuvFON9ufjjrYdn3x","tlshash":"14a2d8a2a091446702b3b9c8e5b1fe2972d2f30fc41a84203ead558a1fc7df9f996570","dom_hash":"domhashf1db0b248dabe06698f37b49abe9fb59","first_seen":"2026-01-24T20:02:32.84518Z","last_seen":"2026-01-24T20:02:32.84518Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"chainusdtsaving.com/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T20:02:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":22,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:11Z","timestamp":1769284931,"ip_dst":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":51916,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-01-24T20:02:11.112880+0000\",\"flow_id\":797142260307164,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":51916,\"dest_ip\":\"118.107.28.253\",\"dest_port\":443,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"webapi.jhyiu-daw.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-01-24T20:02:10.447708+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:12Z","timestamp":1769284932,"ip_dst":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":48526,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:12.840558+0000\",\"flow_id\":2032323315140992,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48526,\"dest_ip\":\"39.101.26.6\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dapptubiapp.oss-rg-china-mainland.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":912,\"bytes_toclient\":4662,\"start\":\"2026-01-24T20:02:12.362880+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:12Z","timestamp":1769284932,"ip_dst":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":48540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:12.874060+0000\",\"flow_id\":2203112689644644,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48540,\"dest_ip\":\"39.101.26.6\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dapptubiapp.oss-rg-china-mainland.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":912,\"bytes_toclient\":4994,\"start\":\"2026-01-24T20:02:12.406628+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:12Z","timestamp":1769284932,"ip_dst":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":48534,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:12.879337+0000\",\"flow_id\":622120195627525,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48534,\"dest_ip\":\"39.101.26.6\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dapptubiapp.oss-rg-china-mainland.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-01-24T20:02:12.367109+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:12Z","timestamp":1769284932,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52364,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:12.882787+0000\",\"flow_id\":414140699310354,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52364,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":5918,\"start\":\"2026-01-24T20:02:12.325906+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:12Z","timestamp":1769284932,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52390,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:12.890951+0000\",\"flow_id\":424218840018754,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52390,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":904,\"bytes_toclient\":1634,\"start\":\"2026-01-24T20:02:12.339778+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:12Z","timestamp":1769284932,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52356,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:12.890661+0000\",\"flow_id\":1859764414117885,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52356,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5918,\"start\":\"2026-01-24T20:02:12.325629+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:12Z","timestamp":1769284932,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52374,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:12.901419+0000\",\"flow_id\":2106976289172243,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52374,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":5918,\"start\":\"2026-01-24T20:02:12.338707+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:12Z","timestamp":1769284932,"ip_dst":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":48556,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:12.919287+0000\",\"flow_id\":1011233495201135,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48556,\"dest_ip\":\"39.101.26.6\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dapptubiapp.oss-rg-china-mainland.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-01-24T20:02:12.406895+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:12Z","timestamp":1769284932,"ip_dst":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":48582,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:12.953884+0000\",\"flow_id\":1226265327844254,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48582,\"dest_ip\":\"39.101.26.6\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dapptubiapp.oss-rg-china-mainland.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":912,\"bytes_toclient\":4994,\"start\":\"2026-01-24T20:02:12.474014+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:12Z","timestamp":1769284932,"ip_dst":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":48570,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:12.976505+0000\",\"flow_id\":1938757452568977,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48570,\"dest_ip\":\"39.101.26.6\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dapptubiapp.oss-rg-china-mainland.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":912,\"bytes_toclient\":4994,\"start\":\"2026-01-24T20:02:12.465297+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:13Z","timestamp":1769284933,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52420,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:13.079859+0000\",\"flow_id\":2127291484523878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52420,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":5918,\"start\":\"2026-01-24T20:02:12.511334+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:13Z","timestamp":1769284933,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52404,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:13.089056+0000\",\"flow_id\":811130968918891,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52404,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5918,\"start\":\"2026-01-24T20:02:12.510827+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:13Z","timestamp":1769284933,"ip_dst":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":48590,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:13.092834+0000\",\"flow_id\":2039248949898459,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48590,\"dest_ip\":\"39.101.26.6\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dapptubiapp.oss-rg-china-mainland.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":4994,\"start\":\"2026-01-24T20:02:12.617691+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:13Z","timestamp":1769284933,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:13.128282+0000\",\"flow_id\":980752112339916,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52424,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5918,\"start\":\"2026-01-24T20:02:12.576460+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:13Z","timestamp":1769284933,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52432,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:13.142605+0000\",\"flow_id\":830496976456811,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52432,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":5918,\"start\":\"2026-01-24T20:02:12.576619+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:13Z","timestamp":1769284933,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52462,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:13.162212+0000\",\"flow_id\":284117006813043,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52462,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":904,\"bytes_toclient\":1634,\"start\":\"2026-01-24T20:02:12.591731+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:13Z","timestamp":1769284933,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52446,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:13.181249+0000\",\"flow_id\":223908007773820,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52446,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-01-24T20:02:12.591484+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:13Z","timestamp":1769284933,"ip_dst":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":48614,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:13.196549+0000\",\"flow_id\":781504284521228,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48614,\"dest_ip\":\"39.101.26.6\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dapptubiapp.oss-rg-china-mainland.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":4994,\"start\":\"2026-01-24T20:02:12.717580+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:13Z","timestamp":1769284933,"ip_dst":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":48600,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:13.203362+0000\",\"flow_id\":1642293039991597,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48600,\"dest_ip\":\"39.101.26.6\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dapptubiapp.oss-rg-china-mainland.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":912,\"bytes_toclient\":4994,\"start\":\"2026-01-24T20:02:12.658221+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:13Z","timestamp":1769284933,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52470,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:13.301992+0000\",\"flow_id\":1372032222927855,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52470,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5918,\"start\":\"2026-01-24T20:02:12.760815+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:02:13Z","timestamp":1769284933,"ip_dst":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":52482,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-24T20:02:13.315314+0000\",\"flow_id\":106956048342197,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52482,\"dest_ip\":\"47.79.64.227\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"yudiannet.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-01-24T20:02:12.761013+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"webapi.jhyiu-daw.icu","ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-04-20","domain_rank":0,"first_seen":"2025-12-30T23:38:10.065983Z","last_seen":"2026-01-24T18:29:10.382519Z","alert_count":0,"request_count":19,"received_data":60132,"sent_data":9888,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"yudiannet.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-12-30T23:38:10.067507Z","last_seen":"2026-01-24T18:29:10.231171Z","alert_count":0,"request_count":9,"received_data":1313793,"sent_data":4267,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"chainusdtsaving.com","ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-01-04","domain_rank":0,"first_seen":"2026-01-24T18:30:21.793514Z","last_seen":"2026-01-24T18:30:21.793515Z","alert_count":0,"request_count":38,"received_data":3617677,"sent_data":15967,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn-icons-png.flaticon.com","ip":{"addr":"23.36.76.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-05-10","domain_rank":239972,"first_seen":"2021-09-02T06:55:19Z","last_seen":"2026-01-21T12:13:30.412637Z","alert_count":0,"request_count":4,"received_data":76353,"sent_data":1756,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com","ip":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-12-30T23:38:10.063969Z","last_seen":"2026-01-24T18:29:11.353945Z","alert_count":0,"request_count":8,"received_data":176539,"sent_data":3659,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"hw.rangwodf.cc","ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-12","domain_rank":0,"first_seen":"2025-06-03T12:45:54.191815Z","last_seen":"2026-01-24T18:29:10.718225Z","alert_count":0,"request_count":1,"received_data":5043,"sent_data":372,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"icons.veryicon.com","ip":{"addr":"104.21.11.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-07-31","domain_rank":2853322,"first_seen":"2016-05-31T15:09:21Z","last_seen":"2026-01-19T21:51:46.123618Z","alert_count":0,"request_count":1,"received_data":52934,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn4.iconfinder.com","ip":{"addr":"172.66.149.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-02-23","domain_rank":608280,"first_seen":"2012-08-14T17:19:25Z","last_seen":"2026-01-24T14:40:10.264631Z","alert_count":0,"request_count":1,"received_data":37188,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chainusdtsaving.com/charting_library/charting_library.min.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-02T16:01:39.462111Z","times_seen":1325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0b24b6e57c96ebdb021f2063d02eb91","sha1":"d90f784c7982cb86a94933aa210b5d2bcdf8fe56","sha256":"3653fcbfa0fba85aa122c84217aabf336dc09fe4a53544f9bc0903434d9acae6","sha512":"7518b54f96f471dcdc24a407f997c3f30f6ce40268b334b3e677a8f95a07a13f65b73732db4468ba8b4de017805477c20134cfeffd3cdc4978ffba069d148a9e","ssdeep":"","tlshash":"8511abfe195a602e6303404e976b7811642250a9401a184177cc9e9dbb9ab7dd0cfb8c","size":1048,"data":"","first_seen":"2026-01-24T18:29:18.950658Z","last_seen":"2026-01-24T20:02:32.891886Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-949f9b00.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"36240edd99a68159de1e639b9a1f2405","sha1":"3f72a4bf26ad1ee6d3be18803a1e9b73b068a754","sha256":"cd66e9d55f349c0914a966676b0821ee54f6b11b3a355cf14450de6e43c0635e","sha512":"234f001cc2712374dd26b1250916d55f40e4a4cd123cca8bb40e54aca2f07aa1df6d8c23ae0d4e8c7ab151db3c8b5fd8bfa32be737c11b104e4ac4a43523c648","ssdeep":"","tlshash":"5901d0f8fc1dcebb1f62069401913501140a1fddfa1819f198977e661be4990d7de72d","size":772,"data":"","first_seen":"2025-12-30T23:38:20.678402Z","last_seen":"2026-04-06T13:36:30.358507Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/overlayPulic-8ba8e0b6.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"8b19050d602d001c9c71c4141aa12429","sha1":"7d1105408168048b356643a87199937b3c132edb","sha256":"b5fec031d06e0d68e62ec038eb87af0776014e6c7e1ef97377a88c5a9365070d","sha512":"af06819f913325e815d544509c6b4cf1694b3ccad8eaf8ed4b5402619f02c233251cfe29496fa15a553caef1aeda1a66a37fb8e2d5a644b124793756da7f2dd3","ssdeep":"","tlshash":"c6f09e6e2c5a81f14990c0fda12131151d1c7e2ca33993c18cdb312aa3b96a45e1d624","size":481,"data":"","first_seen":"2026-01-24T18:29:18.876205Z","last_seen":"2026-01-24T20:02:32.875658Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/roulette-2d1cc647.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"8bb597b81aa59e97fe8514671bfa5fe7","sha1":"6ea0d5fdb6af78ccf7d90652cf3d611c950006cc","sha256":"fac029a50c2e6ce426e527fa2b4ffdd42976ded97fe82b3b054799b7b3039587","sha512":"117e1c5333fc9acd2094c65e26cf521655721aee95a6702cf6b7ee27ce2a88ad02c45d12bcce0b58e3b11051b78b4c7ce045595bb47ae944ee61739cb0c5dfb1","ssdeep":"","tlshash":"90c02b1b8d02c7f381682ccde2d40f84cc3159341ba3d8e000454415036ccd2e1dd000","size":144,"data":"","first_seen":"2026-01-24T18:29:18.941236Z","last_seen":"2026-01-24T20:02:32.88932Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-28T19:32:04.784298Z","times_seen":1389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-28T19:28:06.60817Z","times_seen":1059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-08-05T21:51:54.958157Z","times_seen":1770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:32:04.785689Z","times_seen":667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7c96400943ff63b3b008a98a27c61e3d","sha1":"2b6d5e460a71aaca5d5e7e91e461d75dea0115b8","sha256":"75a2968bb74aab72703044f8502f087e0198d3f6f17c8d32282e3c445ebc0474","sha512":"83bf2b18f155399572df2e325e2ffe5ba1f6f0f90e7816d2d9982422ca134894326e10b7f61936b6f79cbc22e8ad6ef2307fa4bc41ff35aefb4178ac731dfab1","ssdeep":"","tlshash":"bce0abf370b8c1208981121f2cdc282ba3c665b20c4c4e2ab8c8e5186e5cc28207e091","size":408,"data":"","first_seen":"2025-12-30T23:38:20.703838Z","last_seen":"2026-04-10T14:43:55.143865Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ecb9b0fa7fc0b0ce10d012293bf85653","sha1":"62875d9baf87827b9c94e53e81151680fb4d5776","sha256":"e5566de6644a92823e95bb21acf2be60b0e007459c06bc5f1da8f8e2ebf7fc66","sha512":"4cbf2fd303639b6a6be2458f29f6cc44508a51c6872601efc57d7860baf7e61dead0f36161b23c39a47230546b2cd38260e29c6738f0c122c30742ae656ecbac","ssdeep":"","tlshash":"0cc08cc6f0d22d012612781154ef34e49034443674481b028c95dc492e734b08233e99","size":145,"data":"","first_seen":"2025-12-30T23:38:20.702494Z","last_seen":"2026-04-06T13:36:30.382244Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-30T19:44:59.584471Z","times_seen":462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-28T19:41:49.912649Z","times_seen":1066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-07T13:06:29.113746Z","times_seen":41139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-07T13:06:29.11449Z","times_seen":42632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-ed343eaf.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"c9962bd9d60d3b7af9463e6142650971","sha1":"84cabd6ce8aa86f4d4dece9599c9e9cf52251b50","sha256":"52fd9ecdeeac8ca1bbde38f2ed31ca25ba87de70ed4b9c9ca39e1bd7adc5fdbe","sha512":"038ffbf1938e76423f26ea4879710308de71c3f38e149af481dbb5119d26592dc97b269e0aadcad6d568ab786e77890a6f1633a34cf80a549a58b1e939cd995c","ssdeep":"96:C3+vYlnY5kqD+wHQxc3dbyuiUDzb+T3hvsWb43X89R3jMe:++vYlYuqiwHDdb3Y7hv50XulMe","tlshash":"fd91c698f40285ffea7754804848142121a87ffbb20488f6fbbdad0e67b8879e754320","size":4613,"data":"","first_seen":"2026-01-24T18:29:18.877828Z","last_seen":"2026-01-24T20:02:32.891408Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/filters-d9de4558.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"2ca7fb331b909787550bc0f0165c3d56","sha1":"4d79949deb0e3cf883c07a46b5037ea459860746","sha256":"ad70454a78a099a91d271715680f18d1d799d771f4ab4a190ae717f1a9592b97","sha512":"e066bf40bbd8f943a1f547cda01eae2f2ddbf691df393765e55f0686042d6e5f163970efe6969f28aa6100667913fc8808491a95cb01c3b23019901e27630516","ssdeep":"","tlshash":"585124fdfcd3a13356ee6dfd44288514728ebe20686e0a4de55bd0465933888d07f768","size":3078,"data":"","first_seen":"2026-01-24T18:29:18.866039Z","last_seen":"2026-01-24T20:02:32.870333Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"557995f65f5a11b3f15fab2407ce466b","sha1":"4bbc2be07a667e326a6d270a459986b3693ef701","sha256":"d5a4859bf9ec0f9c5954f69ca52e84e33d2a127a30c2b44dfb31f8dae99c10fa","sha512":"efb0d433dc80afc2e5db4120592a7c0cca82ea087095998ffe6e6e12f9094ba8d98e743afeeef476c940476c5c3059a78d3f2bf526e04681a9907824d82dfb15","ssdeep":"","tlshash":"7ac08cc5b0c36e002602645014af38e49034402ab04c1b678ea4e8492e630f08233e98","size":148,"data":"","first_seen":"2025-12-30T23:38:20.695443Z","last_seen":"2026-04-06T13:36:30.388764Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c1155eee87487f5efe9634a03695b16c","sha1":"2532dae40bd8f2c93a9eb7cbb00bf21e050124b1","sha256":"41c9b4311d7a14bda7da372afb964f0bf08f0823e01617a967aa9eb2554d298b","sha512":"ae1174eea2e3597d1ecd46bea51c7948e05095c00c03cb3670e5b62dd0c14abd26e7c3643fda485610290a4426fa92d0c9d7920303a7bdbc659f735313f2ea48","ssdeep":"","tlshash":"28c08cc4b1d22e106606641010af36e490298426b08c1b028ca8e8892e260b08237fec","size":148,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:32:04.780714Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-07T01:18:37.920176Z","times_seen":1696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-5cdb4ea9.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f83029e517c23a313b216ed575a608c","sha1":"941c8d37883af74e5149cd76666739e78d6b21fa","sha256":"0ce4a559b4436cbc39345000ca58137175a66982145170b125aee2ac9bec2b21","sha512":"9dfa93bb6f2272dd3ae7aae8ae7c57ead54f3e358b03250e9fd5e9204501343a5846d6808a1242d45a1bf51fca5c018e82b1be4d23df76c51ae1c5c138b670ee","ssdeep":"768:Dl96CmtgNQsCg/6sfUEN0chkPq+SILe6aZrB1MIVMOVt18eS8Mkh0Tu28ZPhie2R:cmxUNPqvIKrB2eS8Zd2Tj6V0h8LXw","tlshash":"f0a32a8da50b0fff58be0888aa1f580021591fd75d8c88d3b2be6e562bf9ce4535d718","size":102660,"data":"","first_seen":"2026-01-24T18:29:18.896269Z","last_seen":"2026-01-24T20:02:32.884084Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/currencyItem-e80e4d5c.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"c5f1771f725aa98a25468d5009242b0d","sha1":"ff52e86cbcef345cee9757622fac27116df85947","sha256":"47df54045e43e0743f3f63a7ab3f150135fe83a98e57c03effa419d51109ba7d","sha512":"890cf6c1340c25218afd2456a70f2f6f353f4496ce0fa38a295c1c0a765f7fe951b804a5ba580f77f9f50345b715cc85a9a48e0160ca969f186c56acd7507120","ssdeep":"","tlshash":"4b21d29a5902c7b1c7be5062857d5414170d7fda700181c5ebed148a3b8b5fcd724a31","size":1206,"data":"","first_seen":"2026-01-24T18:29:18.872633Z","last_seen":"2026-01-24T20:02:32.883083Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-848ee411.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"79a83a7bb22b1b89a1686bbd14481911","sha1":"d25c5fc52532cca256e8403f6d3571db00035195","sha256":"3f0870f942cc7b51b8f986e3a3125ba3382f5931a211dfe8802f892846f56795","sha512":"5673a2ff4baf81967e80a23939de78dd4496ee67e6c1d8d1c75426d5b8276392cc53f7e16dafa20b25d909ac51e2d2bdd048d7e90f996fdd90caf3f1ef541c2d","ssdeep":"384:18nzQyVHoiVT2yeHjWvFbb1FUZfXRYIQxsEEnbZWYpKE4fqWCq+:+c6Ht2RHadfDUZfXTuE4fqWCq+","tlshash":"1462d995f806993df6b7e06644890020773a3fdb40098ce1b9be6e462753ff8b759b18","size":15567,"data":"","first_seen":"2026-01-24T18:29:18.898971Z","last_seen":"2026-01-24T20:02:32.888803Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-07-30T19:44:59.570838Z","times_seen":658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-28T19:32:04.786467Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-07T06:25:13.150169Z","times_seen":7179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-08-06T06:08:37.439375Z","times_seen":1807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-07-28T19:41:49.895426Z","times_seen":1403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","size":4366,"data":"","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/vendor-64f46974.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"3abf93235f8805aa2deb613de1c2e022","sha1":"3d00674e75280d0c645aab6e995dadb83c2e5e29","sha256":"4d5b7079708762a681efb01593bd187df376929eb2119a74fff768d1cbf01344","sha512":"87d7887c903a132b9189f0b75fdd99897fafd08a343443ded10b564a4120b21a2e703818267814284a0545a8337ffc61e44dc17efd049a48d30898388d199208","ssdeep":"12288:5RnbvFkQvVb8mXXdRLYNmD/ahCVawlVaPeJZ3J/pooTqr9szo/UXRdBE7m+jYhSr:5RnbvFjoiXTLxahCVlSG3WtYioSstI","tlshash":"f31528c97292f06147ab24e240bb0106f3396e59740e84a4f1ad98eb7d79d89d277f3c","size":889410,"data":"","first_seen":"2025-12-30T23:38:20.64961Z","last_seen":"2026-07-17T15:48:13.52573Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-07T10:27:57.032502Z","times_seen":4430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-28T18:29:46.885991Z","times_seen":1049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-07-28T19:32:04.769573Z","times_seen":818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fd3c35200c4b6c13f25e579c41c48563","sha1":"972bcd2e588a867accdf9f86a34590db1a5266b3","sha256":"8cf6b9b35816aefa417feb89ce360ee03e132352eb9103cb3ed2851d2055334e","sha512":"30dea0eaf22aaefec38f97d7e59f520be8ab69e92997805734eda0e65b1010b28d29b18318ae63230fe5408628262bad1a9d12457b5101baf9464c1f69fabe68","ssdeep":"","tlshash":"73c08ccea0c62e002606a95594bf34e4a028442770481b028c94e8883f230f48233f98","size":146,"data":"","first_seen":"2025-12-30T23:38:20.707511Z","last_seen":"2026-04-06T13:36:30.400714Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-30T19:44:59.572483Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-06T06:08:37.448672Z","times_seen":2154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-30T19:44:59.582021Z","times_seen":1652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/#/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-07-28T19:32:04.771856Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/en-957fcd2d.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"50ceebc4416edacf5ebd4bb6c4c437b8","sha1":"a4d7e1c7944ed840f097e5a5b4124b6d1c07150a","sha256":"5e411802073bfde7490016dcbe87f8ed242aad10b6b366a73402c16df2041f8a","sha512":"873a8950d26cb248129ec5f0ef14369d2ddef8c0703e12804aa4de315f58dd3d9c705ba2a44d38adf721b587a94447e667bdac778baa8f44565b740dba023cfc","ssdeep":"768:+GtZcEw/o7rKOUAFsifnAMC2rAaAMFXF6+6sP4u9w1mwO6fpk7aOLeir7:iponKOUebE2rdFXKsP4ewqLeif","tlshash":"5c13d6897e1a889a04f35376b4ce6e5120f60ac18255881f4fedc9fd53d2b67a363734","size":41587,"data":"","first_seen":"2025-12-30T23:38:20.673388Z","last_seen":"2026-04-20T23:52:05.421331Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-949f9b00.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/index-949f9b00.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 772\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\netag: \"69568ab4-304\"\r\nexpires: Sun, 25 Jan 2026 08:02:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":772,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"36240edd99a68159de1e639b9a1f2405","sha1":"3f72a4bf26ad1ee6d3be18803a1e9b73b068a754","sha256":"cd66e9d55f349c0914a966676b0821ee54f6b11b3a355cf14450de6e43c0635e","sha512":"234f001cc2712374dd26b1250916d55f40e4a4cd123cca8bb40e54aca2f07aa1df6d8c23ae0d4e8c7ab151db3c8b5fd8bfa32be737c11b104e4ac4a43523c648","ssdeep":"","tlshash":"5901d0f8fc1dcebb1f62069401913501140a1fddfa1819f198977e661be4990d7de72d","first_seen":"2025-12-30T23:38:20.678402Z","last_seen":"2026-04-06T13:36:30.358507Z","times_seen":18,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getMt5Amount?coin=xag","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4b079c3d1f93e5fdd0fd860ece64cb94","sha1":"7676b99bace337cfe7df39e3c7b5a7897000a199","sha256":"1b2a84c3ba25bf6e54d2a41d78e06599778eb6120496ead7339c8c59734ca001","sha512":"062bd6f4dd661ce56b517ddac9b0b86dfef9f96171e44147fcb5adacad78100112fc959d50ae74eae2da73fd79d7449f685f5f23b8e10065770bc57b0b21d77b","ssdeep":"","tlshash":"189002551c18829fa88300a995062214402431612a2892494c59d12585881662050859","first_seen":"2026-01-24T20:02:32.856622Z","last_seen":"2026-01-24T20:02:32.856622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/512/9235/9235967.png?2.0.1767279284171","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"23.36.76.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 08:23:10 GMT","end":"Fri, 17 Apr 2026 08:23:09 GMT"},"fingerprint":{"sha1":"35:11:C8:0B:80:96:AD:22:F7:3A:39:64:23:9C:BA:29:79:BC:62:E6","sha256":"EF:6B:0D:32:38:67:85:54:A8:AE:C4:9C:45:C6:3F:78:AC:7F:95:D6:F3:FE:1D:31:D7:1A:DB:82:1B:3C:AF:3A"}}},"request":{"raw":"GET /512/9235/9235967.png?2.0.1767279284171 HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 21552\r\netag: \"ea37e7ae1c807d3f853e7ee7f8a1c168\"\r\nlast-modified: Wed, 23 Apr 2025 10:41:34 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=3, ak_p; desc=\"1769284932520_388254877_894885274_351_1837_-_-_-\";dur=1\r\nquic-version: 0x00000001\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21552,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ea37e7ae1c807d3f853e7ee7f8a1c168","sha1":"3332dbaf9019b06f811c479ed069df79df5a0b9b","sha256":"b3c4847ca41e9d28c11ca6c128efe460fd9d2df371800d6cfb57e02cc8a6300a","sha512":"d8cb57f3a6d32a7f67d2e7e12c4a6e3ba83d351b7a1d3b31fa5850144933b8df44a80c60ec2f7308935eac8365aa62d1840036bd0486d048a38cc203fc32503f","ssdeep":"384:x6Tj09TVz9ZH+5Tg2y8tLAgB4Ni9P1Tm5ngUMYLyuxFy/JPo:QXMHuVtNKN2PCoQyuXyxQ","tlshash":"06a2be084c69d412b3fab5f2d80525005e161dce2c9693c47c2b77f9dbd3aaa4c68ef6","first_seen":"2025-12-30T23:38:20.664433Z","last_seen":"2026-04-06T13:36:30.352653Z","times_seen":19,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yudiannet.oss-cn-hongkong.aliyuncs.com/waihui/46bc5222056346448ab7a7e75766792e.png?2.0.1767279284171","fqdn":"yudiannet.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /waihui/46bc5222056346448ab7a7e75766792e.png?2.0.1767279284171 HTTP/1.1\r\nHost: yudiannet.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43084\r\nConnection: keep-alive\r\nx-oss-request-id: 6975254568F5793634F00F35\r\nAccept-Ranges: bytes\r\nETag: \"CD709C4C49D2CB514D64CE0301D4D78C\"\r\nLast-Modified: Wed, 10 Sep 2025 04:51:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12266219080893469363\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: zXCcTEnSy1FNZM4DAdTXjA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":43084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 136 x 144, 8-bit/color RGB, non-interlaced","md5":"cd709c4c49d2cb514d64ce0301d4d78c","sha1":"f8ff49661bac8c8a3331b32b85909db30dc31513","sha256":"9a2e006100494da5b9c16e155e9f86b6c197f85056ea798893d75355f7391fbf","sha512":"48a2943ccd522e584b35c70e9807b4ac63c9206090450e734e8c9d40cc6faf2496921b322e61a51d6d03ec53c8a838476d0a082e3f9f73091a989f913cb53ad4","ssdeep":"768:cQ5Sd1Bwmt6VL/35C7HaUIOAOFqiyutoYGuytT0WpmjBGpdx0OMJNE+8rD:dG1BkVDJqHaUIOVFrxGZAWurJi+0D","tlshash":"bd13f2dcf9b3d2cc02a8941e151c5c9f40f7600c1635ba5b0e9a5b496abafb958cb292","first_seen":"2025-12-30T23:38:20.659075Z","last_seen":"2026-04-06T13:36:30.350793Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":-1,"dns":4,"connect":287,"send":0,"wait":293,"receive":24,"ssl":580},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/resource/svg/light/user.svg?2.0.1767279284171","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1767279284171 HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 551\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\netag: \"692d0dc0-227\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-28T18:19:13.9733Z","times_seen":404,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yudiannet.oss-cn-hongkong.aliyuncs.com/waihui/ca35ce3cae8a45d78d600d7ed0e495ec.png?2.0.1767279284171","fqdn":"yudiannet.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /waihui/ca35ce3cae8a45d78d600d7ed0e495ec.png?2.0.1767279284171 HTTP/1.1\r\nHost: yudiannet.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9525\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545AFAD5B35324021CE\r\nAccept-Ranges: bytes\r\nETag: \"8F03D1E8701E580B5B9B2F9424F126BE\"\r\nLast-Modified: Wed, 10 Sep 2025 05:02:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8404639283704408596\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: jwPR6HAeWAtbmy+UJPEmvg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"8f03d1e8701e580b5b9b2f9424f126be","sha1":"1b04d8f6d40f358c3f87e3e897b9e96ed1a15ee6","sha256":"7cc31db55ea94b1bb72add9fa10eed7be6c60077fdb419e9b564fb971f8f5eec","sha512":"6940a6a43f40be218915aca3881211fee22afd8c36e481bdbfa7b912630585ee0bc7147d4abea8a24f768df61e3b8fb56682acf946950e3f0ad0714f49dc2224","ssdeep":"192:lG8iPFfiCf7Wuh7ijy1N4Cp0fK6PlcXtVBECeEWe/3EBRfDZpYQXIHtMX0:c8iPFx7ajvfzPlcKk0FZ/XIS0","tlshash":"e012afb0bfa7e1a7fe4dc75d4033116246acda809f8a4a88147ac065c6c61642fd6f23","first_seen":"2024-08-19T15:53:11.187446Z","last_seen":"2026-07-28T18:19:13.992374Z","times_seen":42,"resource_available":false,"data":null}},"time_used":1986,"timings":{"blocked":849,"dns":1,"connect":281,"send":0,"wait":282,"receive":2,"ssl":568},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yudiannet.oss-cn-hongkong.aliyuncs.com/waihui/20447376d94a4dc19d142b2576c267e2.jpeg?2.0.1767279284171","fqdn":"yudiannet.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /waihui/20447376d94a4dc19d142b2576c267e2.jpeg?2.0.1767279284171 HTTP/1.1\r\nHost: yudiannet.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7394\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545E6135830385A540B\r\nAccept-Ranges: bytes\r\nETag: \"DCEF052E6BADE7399112F93819D438EA\"\r\nLast-Modified: Tue, 02 Dec 2025 18:42:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5711740090598596164\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 3O8FLmut5zmREvk4GdQ46g==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7394,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dcef052e6bade7399112f93819d438ea","sha1":"ec99cf18e2d88587aaa81ceaa76bcfcb584461d6","sha256":"5c7f08f220c457373b2a77b46beae0160caa598bf7386330786bb93e139f7791","sha512":"f3e72c5e2b2c7e998898b4ff3f0a8743bc6c0da8e654ca0dbc927cbcf27fe711f54ab5682d4e1685fda164906f35eb05f6a6abb3e7629513619d4073a79911d1","ssdeep":"192:c7CqZkfo4cHNxcb8oaPvUt7buU/nmcdbE3GmZvG:c7vZycLcgoaktPuU/mP3GN","tlshash":"79e19f53efca3ce427306c848f096c140c3ea82ac1b99ca0429fb456d5318b91332f6e","first_seen":"2025-12-30T23:38:20.663563Z","last_seen":"2026-04-06T13:36:30.366072Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1981,"timings":{"blocked":845,"dns":8,"connect":280,"send":0,"wait":281,"receive":1,"ssl":563},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com/waihui/binance-coin.png?2.0.1767279284171","fqdn":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-rg-china-mainland.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Feb 2025 02:21:06 GMT","end":"Wed, 11 Mar 2026 02:21:05 GMT"},"fingerprint":{"sha1":"FB:DB:9E:CD:BB:14:E6:CC:9A:2F:F2:B3:C9:29:07:04:8A:6E:B9:E3","sha256":"99:EE:93:AA:8F:36:82:A8:97:17:25:A9:72:88:B0:B1:D0:8A:8E:64:F4:3A:93:61:10:71:D9:6C:16:F9:94:92"}}},"request":{"raw":"GET /waihui/binance-coin.png?2.0.1767279284171 HTTP/1.1\r\nHost: dapptubiapp.oss-rg-china-mainland.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545760AD53534480F4A\r\nAccept-Ranges: bytes\r\nETag: \"A533EECDEE5A789E7D94F8F79F95D588\"\r\nLast-Modified: Wed, 26 Mar 2025 08:36:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18158548296662870332\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000105\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pTPuze5aeJ59lPj3n5XViA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-08-05T10:02:24.585252Z","times_seen":926,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":1,"connect":253,"send":0,"wait":255,"receive":1,"ssl":513},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:13 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":559,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"775f20d50b3bbfa3fbf001092055384a","sha1":"d1aed183fdb76d026965891662d22921da2946bf","sha256":"cb8883b3da7363f4aac5dc2804ca1b6f678ca6728d78ae804f1f39cecfa2ee30","sha512":"2adecacf777718b88e03b03eb08c857a91cda8eb10c24c73d84591edf14ad9a2b00bafa91e3063da058a89612036fc6f870bfe5eb47c5217da8975875dfa3987","ssdeep":"","tlshash":"25f08b0e1038dd790c0449d768c9bcc9429e264be220cd70956acf2c81f59fb0b06104","first_seen":"2025-12-30T23:38:20.670705Z","last_seen":"2026-04-06T13:36:30.342837Z","times_seen":12,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yudiannet.oss-cn-hongkong.aliyuncs.com/waihui/bb669b91e75e41d6a29d49d550398d4d.png?2.0.1767279284171","fqdn":"yudiannet.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:13.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /waihui/bb669b91e75e41d6a29d49d550398d4d.png?2.0.1767279284171 HTTP/1.1\r\nHost: yudiannet.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1144052\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545AFAD5B35327521CE\r\nAccept-Ranges: bytes\r\nETag: \"EA556540893F83B8CD272A60E81DA437\"\r\nLast-Modified: Wed, 10 Sep 2025 13:51:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17053238627683601333\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 6lVlQIk/g7jNJypg6B2kNw==\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1144052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 712, 8-bit/color RGB, non-interlaced","md5":"cdf6b50d30c56ba195d5143c8830bb5a","sha1":"502c269b54f3025396112f7c42521e3912426fb0","sha256":"52c1659ff669e703f2ae6851620c6faf43426516a3c0a76419a55eb3fda28d96","sha512":"a822ab754430bec32754bf99b6eb689994d60fcbd72bed7c5aa6fb4f1445bf199e30a6e768255ee06f84b86b2a9e0e4c76fc8a8b08ddfa11bda80d2e30d005a5","ssdeep":"24576:0Hh0GKrjs47ahTIcB3UmaMc5Ep8lwSNWoUWjdANw:yKE4GTHB3taH5EFSNVhYw","tlshash":"6e2533f9c07edc7a55717a897743378ee11d6c97ebc920832a47f62871eb1a22074b12","first_seen":"2025-12-30T23:38:20.680203Z","last_seen":"2026-04-06T13:36:30.357245Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1825,"timings":{"blocked":229,"dns":0,"connect":0,"send":0,"wait":298,"receive":1298,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/overlayPulic-03f7ca2a.css","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/overlayPulic-03f7ca2a.css HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 253\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\netag: \"69568ab4-fd\"\r\nexpires: Sun, 25 Jan 2026 08:02:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":253,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c7da21c1a989d0469a6953761cc6b725","sha1":"fad3d05fc52c912c19734e73d00c37035d378998","sha256":"03f7ca2a6f5f4716f06799f546f11c20009c6a18f124e01aaa534c373a8a44e1","sha512":"f07ebd65f2de45cc0bd5116e860006222025e1352180cc121461f20a85680f55eaa422d562e0daace059353c1ca5754352fd2690f339dab9b112027e580582a7","ssdeep":"","tlshash":"2fd02b2a9205003d795ee10d79c417ec883d1d429a431fece25f52b110d27d91164001","first_seen":"2025-12-30T23:38:20.66637Z","last_seen":"2026-04-28T19:24:04.570853Z","times_seen":19,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":845,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/charting_library/charting_library.min.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:08.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d0dc0-2a6a\"\r\nexpires: Sun, 25 Jan 2026 08:02:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-02T16:01:39.462111Z","times_seen":1325,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/vendor-64f46974.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/vendor-64f46974.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-d9242\"\r\nexpires: Sun, 25 Jan 2026 08:02:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":889410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3abf93235f8805aa2deb613de1c2e022","sha1":"3d00674e75280d0c645aab6e995dadb83c2e5e29","sha256":"4d5b7079708762a681efb01593bd187df376929eb2119a74fff768d1cbf01344","sha512":"87d7887c903a132b9189f0b75fdd99897fafd08a343443ded10b564a4120b21a2e703818267814284a0545a8337ffc61e44dc17efd049a48d30898388d199208","ssdeep":"12288:5RnbvFkQvVb8mXXdRLYNmD/ahCVawlVaPeJZ3J/pooTqr9szo/UXRdBE7m+jYhSr:5RnbvFjoiXTLxahCVlSG3WtYioSstI","tlshash":"f31528c97292f06147ab24e240bb0106f3396e59740e84a4f1ad98eb7d79d89d277f3c","first_seen":"2025-12-30T23:38:20.64961Z","last_seen":"2026-07-17T15:48:13.52573Z","times_seen":35,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/en-957fcd2d.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/en-957fcd2d.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-a275\"\r\nexpires: Sun, 25 Jan 2026 08:02:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41589,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (41566)","md5":"50ceebc4416edacf5ebd4bb6c4c437b8","sha1":"a4d7e1c7944ed840f097e5a5b4124b6d1c07150a","sha256":"5e411802073bfde7490016dcbe87f8ed242aad10b6b366a73402c16df2041f8a","sha512":"873a8950d26cb248129ec5f0ef14369d2ddef8c0703e12804aa4de315f58dd3d9c705ba2a44d38adf721b587a94447e667bdac778baa8f44565b740dba023cfc","ssdeep":"768:+GtZcEw/o7rKOUAFsifnAMC2rAaAMFXF6+6sP4u9w1mwO6fpk7aOLeir7:iponKOUebE2rdFXKsP4ewqLeif","tlshash":"5c13d6897e1a889a04f35376b4ce6e5120f60ac18255881f4fedc9fd53d2b67a363734","first_seen":"2025-12-30T23:38:20.673388Z","last_seen":"2026-04-20T23:52:05.421331Z","times_seen":27,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com/waihui/solana.png?2.0.1767279284171","fqdn":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-rg-china-mainland.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Feb 2025 02:21:06 GMT","end":"Wed, 11 Mar 2026 02:21:05 GMT"},"fingerprint":{"sha1":"FB:DB:9E:CD:BB:14:E6:CC:9A:2F:F2:B3:C9:29:07:04:8A:6E:B9:E3","sha256":"99:EE:93:AA:8F:36:82:A8:97:17:25:A9:72:88:B0:B1:D0:8A:8E:64:F4:3A:93:61:10:71:D9:6C:16:F9:94:92"}}},"request":{"raw":"GET /waihui/solana.png?2.0.1767279284171 HTTP/1.1\r\nHost: dapptubiapp.oss-rg-china-mainland.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545760AD53330370F4A\r\nAccept-Ranges: bytes\r\nETag: \"670C723ABC22056BC5368CA2A97DD6A2\"\r\nLast-Modified: Wed, 26 Mar 2025 08:36:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10769821075161595358\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000105\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.518064Z","times_seen":932,"resource_available":false,"data":null}},"time_used":1197,"timings":{"blocked":-1,"dns":1,"connect":237,"send":0,"wait":476,"receive":1,"ssl":482},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/512/8899/8899687.png?2.0.1767279284171","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"23.36.76.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 08:23:10 GMT","end":"Fri, 17 Apr 2026 08:23:09 GMT"},"fingerprint":{"sha1":"35:11:C8:0B:80:96:AD:22:F7:3A:39:64:23:9C:BA:29:79:BC:62:E6","sha256":"EF:6B:0D:32:38:67:85:54:A8:AE:C4:9C:45:C6:3F:78:AC:7F:95:D6:F3:FE:1D:31:D7:1A:DB:82:1B:3C:AF:3A"}}},"request":{"raw":"GET /512/8899/8899687.png?2.0.1767279284171 HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 18541\r\netag: \"da6991b8544da67de6589aa957d9bef0\"\r\nlast-modified: Tue, 17 Jun 2025 12:38:58 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=10, ak_p; desc=\"1769284932427_388254877_894885273_960_1374_-_-_-\";dur=1\r\nquic-version: 0x00000001\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"da6991b8544da67de6589aa957d9bef0","sha1":"34e60e8d8d114d0b46441e845ebde2b07de70d09","sha256":"8ad49c0528780aed33beb22911dbbaa9a81e197682512ca48cbfc6f6eeac64d9","sha512":"621c3d374c5ce895e3dfcfb4e295c8203821e4bc5f251c3b166ad6bb362aa8948a632c606ad839aac8611abb39fc1aee20696264f755e7982b7e8da189b3a73d","ssdeep":"384:1VkrX6ujx1cWoTAZ6KHq/xiPlWg+xmhGnOG8ACKlZQt:KVx1zoTmq/xi7+Ytl1KfM","tlshash":"5d82bf90e495c30cce0d2f76543a6b689941dbd78a3459a9c32ab54ddf143ee03ef824","first_seen":"2025-12-30T23:38:20.691965Z","last_seen":"2026-04-06T13:36:30.362103Z","times_seen":19,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getAllSetting","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:13 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14088,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"40edd5ca7ac7bce2eec1186b29d95cfe","sha1":"bff77630cb95580f1d78d254436b266c763aa93b","sha256":"55905d77f88849f7f54c2139a15bcf271fe71daf4a22e51eabba0547353db392","sha512":"fa6b1a74bd2b4e292bb7c0b7bcbb904fb5f52b1699b5ca1357bdea685fd71b8803cac6be973abd54ccbc9c6b5fc449c854bb2107d191dbd2823d3f024bdb5553","ssdeep":"384:bGytGjDaFqHXigCj2OGzTj0aH3NyHPWQnb:bGyEjDaFq3igeyj0a9yHOQb","tlshash":"4a52961a32d8dcbd87d75aca90fb39057adc386bd994ec41c4a7ef5c85e99f2480b009","first_seen":"2026-01-24T18:29:18.845868Z","last_seen":"2026-01-24T20:02:32.868307Z","times_seen":8,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/platform/dev/favicon.ico?2.0.1767279284171","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1767279284171 HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\netag: \"692d0dc0-10be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"c2c37fa4ac01f8696e4fdf1365fb085b","sha1":"39b385e4fa4b24d1332f2103c1d48c25768e7afb","sha256":"02dfd11e190fa690b49178b7a5256fc58e7601ffdce7ab113f12dbd233ce27b3","sha512":"91de6cb71c7a103caa87007e408b28f09b4925ad3a9affc1c7658544ec9792cc873a84ea92908080c91691e93d6631d17f4b006e8d2483138be1265bb3e9af48","ssdeep":"96:ooelv2ehvCZEQWyNKc1xxxxxxxxxxxxnNfjCNNNOT:LelvdCDdNfjCNDOT","tlshash":"1c9164da17218f7cfc95007cf0908a0d199a6eae754942fb94e2b14858b6bd9c47bcb3","first_seen":"2025-12-30T23:38:20.652825Z","last_seen":"2026-04-20T23:52:05.417831Z","times_seen":28,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getMt5Amount?coin=xau","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/resource/svg/light/zu29.svg?2.0.1767279284171","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1767279284171 HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\netag: \"692d0dc0-348\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-29T22:52:22.73799Z","times_seen":934,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/type/defi_activity_type","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:13 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-07-28T19:32:04.761168Z","times_seen":800,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/filters-d9de4558.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/filters-d9de4558.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-c06\"\r\nexpires: Sun, 25 Jan 2026 08:02:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3077)","md5":"2ca7fb331b909787550bc0f0165c3d56","sha1":"4d79949deb0e3cf883c07a46b5037ea459860746","sha256":"ad70454a78a099a91d271715680f18d1d799d771f4ab4a190ae717f1a9592b97","sha512":"e066bf40bbd8f943a1f547cda01eae2f2ddbf691df393765e55f0686042d6e5f163970efe6969f28aa6100667913fc8808491a95cb01c3b23019901e27630516","ssdeep":"","tlshash":"585124fdfcd3a13356ee6dfd44288514728ebe20686e0a4de55bd0465933888d07f768","first_seen":"2026-01-24T18:29:18.866039Z","last_seen":"2026-01-24T20:02:32.870333Z","times_seen":8,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/filters-d9de4558.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/filters-d9de4558.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-c06\"\r\nexpires: Sun, 25 Jan 2026 08:02:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3077)","md5":"2ca7fb331b909787550bc0f0165c3d56","sha1":"4d79949deb0e3cf883c07a46b5037ea459860746","sha256":"ad70454a78a099a91d271715680f18d1d799d771f4ab4a190ae717f1a9592b97","sha512":"e066bf40bbd8f943a1f547cda01eae2f2ddbf691df393765e55f0686042d6e5f163970efe6969f28aa6100667913fc8808491a95cb01c3b23019901e27630516","ssdeep":"","tlshash":"585124fdfcd3a13356ee6dfd44288514728ebe20686e0a4de55bd0465933888d07f768","first_seen":"2026-01-24T18:29:18.866039Z","last_seen":"2026-01-24T20:02:32.870333Z","times_seen":8,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getMt5Amount?coin=xau","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4a30b4eca0f074e33364b6c38315b36c","sha1":"83e146b67d3e16e303b3acd125603a0133d7d2ca","sha256":"ea0a22b7909ffcba84ba08799ae85adbc3fcb21c171f7e1f405fdfb5dcb6a59f","sha512":"e6f2f0d14ebb1785471e99d6c811ff1403d20e51e4f2932ffe3b100968eebc8fbb982180e519ed65e7c635afc234b0f23959799f4171500e1efff8c3833da336","ssdeep":"","tlshash":"9e9002961c589242f8c700ad9906560410643778262492484d599125c0881622040c58","first_seen":"2026-01-24T20:02:32.87085Z","last_seen":"2026-01-24T20:02:32.87085Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/512/4318/4318318.png?2.0.1767279284171","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"23.36.76.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 08:23:10 GMT","end":"Fri, 17 Apr 2026 08:23:09 GMT"},"fingerprint":{"sha1":"35:11:C8:0B:80:96:AD:22:F7:3A:39:64:23:9C:BA:29:79:BC:62:E6","sha256":"EF:6B:0D:32:38:67:85:54:A8:AE:C4:9C:45:C6:3F:78:AC:7F:95:D6:F3:FE:1D:31:D7:1A:DB:82:1B:3C:AF:3A"}}},"request":{"raw":"GET /512/4318/4318318.png?2.0.1767279284171 HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 14060\r\netag: \"eafb9df5142c4c735040786a85d7e898\"\r\nlast-modified: Tue, 22 Apr 2025 05:04:31 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1769284932377_388254846_815736853_26_1079_0_0_11\";dur=1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"eafb9df5142c4c735040786a85d7e898","sha1":"1e866e64c80f9f357e6265cf373691b7138a298d","sha256":"1a17cf3129c2b799290361efa182916652b506ce8f4ddb8c6e276dfa745a2cb3","sha512":"5140391b82760a229c40495147c6b968296634078f4901ff02a3496fa81e3b7194336d7311328e1102611f1ace6de8bf6710ff2df01f1a42404c4468ddbaec48","ssdeep":"384:lkPAVkfN37I+REEeEh7l8OE1MP0e5+XcHS:lsAVkt7ICVc4gyS","tlshash":"62529ea6513904d3daec19f7196e42c9eee3f587a11377bc95140bf345f2016ae90eb0","first_seen":"2025-12-30T23:38:20.660054Z","last_seen":"2026-07-23T13:46:57.338729Z","times_seen":95,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":47,"dns":0,"connect":1,"send":0,"wait":9,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com/waihui/ripple.png?2.0.1767279284171","fqdn":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-rg-china-mainland.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Feb 2025 02:21:06 GMT","end":"Wed, 11 Mar 2026 02:21:05 GMT"},"fingerprint":{"sha1":"FB:DB:9E:CD:BB:14:E6:CC:9A:2F:F2:B3:C9:29:07:04:8A:6E:B9:E3","sha256":"99:EE:93:AA:8F:36:82:A8:97:17:25:A9:72:88:B0:B1:D0:8A:8E:64:F4:3A:93:61:10:71:D9:6C:16:F9:94:92"}}},"request":{"raw":"GET /waihui/ripple.png?2.0.1767279284171 HTTP/1.1\r\nHost: dapptubiapp.oss-rg-china-mainland.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545760AD53532090F4A\r\nAccept-Ranges: bytes\r\nETag: \"674B0999F6083084A2A4B1D8B20F3BC1\"\r\nLast-Modified: Wed, 26 Mar 2025 08:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2919851811578833622\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000105\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Z0sJmfYIMISipLHYsg87wQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-30T19:44:59.564025Z","times_seen":884,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":4,"connect":232,"send":0,"wait":233,"receive":0,"ssl":470},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/resource/images/light/zhiyaimg.png?2.0.1767279284171","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /resource/images/light/zhiyaimg.png?2.0.1767279284171 HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d0dc0-fa66\"\r\nexpires: Mon, 23 Feb 2026 20:02:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 222 x 200, 8-bit/color RGBA, non-interlaced","md5":"a56d10c7d8a1370d32a7309ee9725b35","sha1":"46a2abdc3eb5771d612d44e437ffc06d660aac82","sha256":"91f0a111642cba65b537a29310bd63c2d68f7a693728423ebc7c80dfc7dccb2c","sha512":"e73500755f1efe7365462f0c7f7616932aa55cffcbac32ad5c91061248e738fd8690c2b968a41ee849e4c7728a6ac3ac5cc76ec9f10f7fbf3a55e2cf4641b79c","ssdeep":"1536:Z8twyIjO5IoAXzpTyTc6Uo306DzPHDVXRAnzJE19EqwgPKO5qql:GAS5SDpOABokqzPrA2t/Xl","tlshash":"c25312351c166852e00a5faa6dbe302d8286e91c7d73c324607c0e0ff9d9fa74dda8b0","first_seen":"2025-12-30T23:38:20.660979Z","last_seen":"2026-04-06T13:36:30.372717Z","times_seen":18,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getAllSetting","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getMt5Amount?coin=xag","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/type/defi_activity_type","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:13 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-07-28T19:32:04.761168Z","times_seen":800,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/resource/fonts/Arial.ttf","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:09.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainusdtsaving.com/assets/index-2abcbd85.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:09 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\netag: \"692d0dc0-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-30T19:44:59.556937Z","times_seen":2202,"resource_available":false,"data":null}},"time_used":1314,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":619,"receive":695,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-5c2400e1.css","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/index-5c2400e1.css HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-a01\"\r\nexpires: Sun, 25 Jan 2026 08:02:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"db4a78dec830917f30f22444dc401a7f","sha1":"d8caf8ea384ba597c7aeb57ad3b836f68c983a7b","sha256":"5c2400e112aed0e5906b95cbc432d67c631a692df019599858dd0e8d9cd67221","sha512":"541ce681635b9847671bcb12fb6c45660ebd163e2a79c4bfccd63aa81517aa921760a602f8c6dfbcc72841a088f158664764657b828ee6cfef904c2ab65975bb","ssdeep":"","tlshash":"5a510f4df7a915361d73ca8bae646e5dd4007e82e447eec5f003a60a1acf6a3273065e","first_seen":"2025-12-30T23:38:20.67751Z","last_seen":"2026-04-06T13:36:30.353639Z","times_seen":16,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/type/defi_activity_type","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:08.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rangwodf.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:00:44 GMT","end":"Fri, 24 Apr 2026 10:59:07 GMT"},"fingerprint":{"sha1":"A7:D7:98:60:01:FB:A2:7D:68:92:7C:66:27:0F:6E:9F:EF:58:EE:0D","sha256":"30:5B:B5:CD:C6:1D:DC:50:AB:B2:5C:F7:80:BB:2E:B0:F2:8C:5D:36:95:24:63:FC:BF:96:EE:7B:E0:58:33:CC"}}},"request":{"raw":"GET /1.js HTTP/1.1\r\nHost: hw.rangwodf.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 20:02:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Jan 2026 15:40:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XLjIK1717AcfW8jqBHXivwqE01Am6GO7hh4G6SMiKQO0BGPr9xXVuWQk7Y30E97LOkG4W%2FZvUN1Gyf0wsW5bXgr%2FGOcxrlxWCw3WUqht\"}]}\r\nage: 5600\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"695bdb5c-110e\"\r\ncontent-encoding: br\r\ncf-ray: 9c3220713af949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4366,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":12,"dns":0,"connect":1,"send":0,"wait":10,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-d24d82f4.css","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/index-d24d82f4.css HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-2ed2\"\r\nexpires: Sun, 25 Jan 2026 08:02:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11986,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11985)","md5":"cb56853ffc82025936caf8f4f45e518f","sha1":"03d3f970381db0cf5d1abacf630df04028dbbd40","sha256":"d24d82f4394b12ccab5605e3b41ee5c164d86f67a3689ea12b3bd032b3cac5f3","sha512":"a9cdc42e026efb4589e53d19ff63e0f4b435bb377d3c8e48f1baf0d1adebcc16f112be3744fdca30e394b0e4a742f8bbda3b06347bd883e03c37108524cb1546","ssdeep":"192:RHzUMRBYD6WEUwYiwcm0g1mgAyy3dUrRqmEmQq2XLTKE/eG:RT4nQ/eG","tlshash":"f332546df6a42338ac3be195bfd44ecce14aba11e6d39d94fa17592208cb7e3163005d","first_seen":"2025-12-30T23:38:20.658294Z","last_seen":"2026-04-06T13:36:30.374105Z","times_seen":18,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/overlayPulic-8ba8e0b6.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/overlayPulic-8ba8e0b6.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 481\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\netag: \"69568ab4-1e1\"\r\nexpires: Sun, 25 Jan 2026 08:02:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":481,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (480)","md5":"8b19050d602d001c9c71c4141aa12429","sha1":"7d1105408168048b356643a87199937b3c132edb","sha256":"b5fec031d06e0d68e62ec038eb87af0776014e6c7e1ef97377a88c5a9365070d","sha512":"af06819f913325e815d544509c6b4cf1694b3ccad8eaf8ed4b5402619f02c233251cfe29496fa15a553caef1aeda1a66a37fb8e2d5a644b124793756da7f2dd3","ssdeep":"","tlshash":"c6f09e6e2c5a81f14990c0fda12131151d1c7e2ca33993c18cdb312aa3b96a45e1d624","first_seen":"2026-01-24T18:29:18.876205Z","last_seen":"2026-01-24T20:02:32.875658Z","times_seen":8,"resource_available":true,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/platform/dev/logo_144.png?2.0.1767279284171","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1767279284171 HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d0dc0-193a\"\r\nexpires: Mon, 23 Feb 2026 20:02:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"50f574f4f2f03443c5a256778b8620d1","sha1":"114a6496ed36e1e47e0c03dac805218be6ff7536","sha256":"d711cc9896caa50d5372dd43d3563b79363d103572a8a5c8768fb0b5bbc08e43","sha512":"e4ef317f936b4a1e5a66f7b3bb7ba6060a29da21d34eabc2c985126db1ff9d437c94d7d2be4f1597ac58eb4ffbbdf494ea3407d71be1bd9fb8b258e3c65abb99","ssdeep":"96:FcTUS26mjE4Ar0sSY91c7OjTYtGZfrqx8FJE6jOUnoKpSQlON:mTUS26mjE4A6Yq7WYIS8FKKpS1N","tlshash":"3bd1aebb259746dd202f4ce608cccaa60104ea8fb5b79295674301cba229cb2914fe68","first_seen":"2025-12-30T23:38:20.661881Z","last_seen":"2026-04-20T23:52:05.416683Z","times_seen":27,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/512/5572/5572192.png?2.0.1767279284171","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"23.36.76.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 08:23:10 GMT","end":"Fri, 17 Apr 2026 08:23:09 GMT"},"fingerprint":{"sha1":"35:11:C8:0B:80:96:AD:22:F7:3A:39:64:23:9C:BA:29:79:BC:62:E6","sha256":"EF:6B:0D:32:38:67:85:54:A8:AE:C4:9C:45:C6:3F:78:AC:7F:95:D6:F3:FE:1D:31:D7:1A:DB:82:1B:3C:AF:3A"}}},"request":{"raw":"GET /512/5572/5572192.png?2.0.1767279284171 HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 20095\r\netag: \"08c2366e1561e939f1293175b61da8bc\"\r\nlast-modified: Fri, 18 Apr 2025 19:13:19 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1769284932330_388254846_815736851_33_1223_0_42_11\";dur=1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20095,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"08c2366e1561e939f1293175b61da8bc","sha1":"fe783dbc377f6f65e3ab4a3304710065d95746d3","sha256":"2cc4d49e01b3923552d5ac191e4822b04f4a97ac3539f6a729478bebced9010e","sha512":"43eaca2b7e8b4ad29be87dd5e93031c1e74603fe650a829776666723b45bbee547ccb2abe6e50b47f6189fbf45cc6b4c0f864981474c12440f6e5dc69bad479d","ssdeep":"384:bSQ73M691RagCMWm2jWNVe7/HsmdB9DbsbCIsijgWxUYynJ86kpZmsk:bSQv1YMWm2Kerr9HxPikWynJ86kpssk","tlshash":"da92c09238b905f17b5f1734a222714e33b1f8b9c91b157cf59b1072a9658cea081bf6","first_seen":"2025-12-30T23:38:20.688737Z","last_seen":"2026-07-23T13:46:57.337299Z","times_seen":95,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":60,"dns":1,"connect":1,"send":0,"wait":7,"receive":3,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.veryicon.com/png/o/business/bitcoin-icon/trade-1.png?2.0.1767279284171","fqdn":"icons.veryicon.com","domain":"veryicon.com","tld":"com"},"ip":{"addr":"104.21.11.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c5dc5105.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 03:03:54 GMT","end":"Tue, 14 Apr 2026 04:03:51 GMT"},"fingerprint":{"sha1":"66:13:18:EB:E7:27:F1:6B:37:4A:FB:0C:1E:47:D8:33:49:98:33:7C","sha256":"44:BC:F2:3D:EF:4A:DC:B6:6C:16:25:46:9E:68:E0:70:E9:4F:9F:C2:CB:46:DA:BA:2F:CB:63:77:E2:8A:14:8D"}}},"request":{"raw":"GET /png/o/business/bitcoin-icon/trade-1.png?2.0.1767279284171 HTTP/1.1\r\nHost: icons.veryicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 52148\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"5a85f3700d35f3069d190075b2d4d1e7\"\r\nlast-modified: Tue, 22 Apr 2025 05:13:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 2963\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0g1CKZIyrpAr6gxzdR0BYXtRq3vdg1Bz%2Bb3sklTLfizphWq2UO1l%2Fv%2FEMD0os6H2PaTNcI%2BvX0c93aWTABTNdExWzvdP3eY174j6XOFZ1%2BBLQQ%3D%3D\"}]}\r\ncf-ray: 9c32208c49d323eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"5a85f3700d35f3069d190075b2d4d1e7","sha1":"8b64010c0525a531ac7a3c89cf2d51a8f04f9731","sha256":"5de32f88ea18e22219a4bc62f60d31b964972f71d408c6dc35ebc64a08a54b31","sha512":"ca416cfd0278975b7581d61c7b14cc78844d2610e310701b46e83fbb47f69d45e0bcb8e78fa7862dfb1e8324e882831beac4937cf5595a65d3d9ecfebb352592","ssdeep":"1536:XC72tLeg7BTc7CW47ta4xVo4uERmZHyrL4O:dtLeg7BTc7C/4MDmUrL4O","tlshash":"f53302e6d0d38161dac0cabd1eab8e704902bce8b468136d6d1c5db7535c8e9c5c2899","first_seen":"2025-12-30T23:38:20.687776Z","last_seen":"2026-04-06T13:36:30.370729Z","times_seen":13,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":10,"receive":5,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getCoinList","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19914,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (19898), with no line terminators","md5":"2b88ad327f92c969a3dda4c3e5bfc4f3","sha1":"16220598485498b829d024e38fd0021359b6ccd3","sha256":"54e8e6c09c4f3991d996a2f3f0fc55350a9f4449106317e4c4354eb75411c3b7","sha512":"001125262b6c29c30b15bd6c2a3f19ceb75ba4649d2c520abcb0fc458a5b42b4d9714e036b514ef4259a3e81fb36496e62c6e29928b1d16914838c2abc584106","ssdeep":"192:VXzNXEpXk6+XwjcXCVXakx0XsJXlcX3QScguMwXIwYoK7ocYf8CKznjmLxmQlFTf:3xYk4Fn","tlshash":"81922055116898bcd57a81e52fbfb91201dd367facd58e0b86ce8d8c4ed9ef0160af02","first_seen":"2026-01-24T20:02:32.878175Z","last_seen":"2026-01-24T20:02:32.878175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com/waihui/litecoin.png?2.0.1767279284171","fqdn":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-rg-china-mainland.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Feb 2025 02:21:06 GMT","end":"Wed, 11 Mar 2026 02:21:05 GMT"},"fingerprint":{"sha1":"FB:DB:9E:CD:BB:14:E6:CC:9A:2F:F2:B3:C9:29:07:04:8A:6E:B9:E3","sha256":"99:EE:93:AA:8F:36:82:A8:97:17:25:A9:72:88:B0:B1:D0:8A:8E:64:F4:3A:93:61:10:71:D9:6C:16:F9:94:92"}}},"request":{"raw":"GET /waihui/litecoin.png?2.0.1767279284171 HTTP/1.1\r\nHost: dapptubiapp.oss-rg-china-mainland.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545BDADCC3734648491\r\nAccept-Ranges: bytes\r\nETag: \"BB27C369A3AA54D9C1F8E59E1706DA48\"\r\nLast-Modified: Wed, 26 Mar 2025 08:37:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000105\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uyfDaaOqVNnB+OWeFwbaSA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-07-30T19:44:59.560175Z","times_seen":885,"resource_available":false,"data":null}},"time_used":1282,"timings":{"blocked":-1,"dns":0,"connect":254,"send":0,"wait":511,"receive":2,"ssl":514},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com/waihui/tron.png?2.0.1767279284171","fqdn":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-rg-china-mainland.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Feb 2025 02:21:06 GMT","end":"Wed, 11 Mar 2026 02:21:05 GMT"},"fingerprint":{"sha1":"FB:DB:9E:CD:BB:14:E6:CC:9A:2F:F2:B3:C9:29:07:04:8A:6E:B9:E3","sha256":"99:EE:93:AA:8F:36:82:A8:97:17:25:A9:72:88:B0:B1:D0:8A:8E:64:F4:3A:93:61:10:71:D9:6C:16:F9:94:92"}}},"request":{"raw":"GET /waihui/tron.png?2.0.1767279284171 HTTP/1.1\r\nHost: dapptubiapp.oss-rg-china-mainland.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545760AD53434970F4A\r\nAccept-Ranges: bytes\r\nETag: \"D5CA5F90C7A46CB88E5F57B2D3046BA8\"\r\nLast-Modified: Wed, 26 Mar 2025 08:36:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000105\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1cpfkMekbLiOX1ey0wRrqA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.550492Z","times_seen":713,"resource_available":false,"data":null}},"time_used":1398,"timings":{"blocked":920,"dns":0,"connect":0,"send":0,"wait":476,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getAllSetting","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":1632,"timings":{"blocked":651,"dns":1,"connect":323,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.iconfinder.com/data/icons/bitcoin-technology-vol-1/128/bitcoin-mining-512.png?2.0.1767279284171","fqdn":"cdn4.iconfinder.com","domain":"iconfinder.com","tld":"com"},"ip":{"addr":"172.66.149.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconfinder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 21:20:48 GMT","end":"Thu, 09 Apr 2026 22:18:23 GMT"},"fingerprint":{"sha1":"90:76:53:AA:D7:20:9E:F4:3D:3D:89:52:6F:D2:BF:AD:41:BF:13:9C","sha256":"28:0D:C8:F9:9D:71:60:CA:44:DF:D0:29:54:42:B2:0A:68:8F:2E:F8:E4:4E:95:DB:63:73:7E:C0:65:25:3F:7A"}}},"request":{"raw":"GET /data/icons/bitcoin-technology-vol-1/128/bitcoin-mining-512.png?2.0.1767279284171 HTTP/1.1\r\nHost: cdn4.iconfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 35741\r\ncf-ray: 9c32208b18eb5685-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"3068921.png\"\r\ncontent-security-policy: script-src 'none'\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=q6dANAb3mLlSKh9%2FEzfUkYGfqN087ApT1FyzjWk53lM%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1768937037\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=q6dANAb3mLlSKh9%2FEzfUkYGfqN087ApT1FyzjWk53lM%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1768937037\"\r\nvia: 2.0 heroku-router\r\nx-request-id: ff5f51c2-e72d-8071-e7dd-f54b4ec79567\r\naccept-ranges: bytes\r\nlast-modified: Tue, 20 Jan 2026 19:23:57 GMT\r\nage: 347895\r\nexpires: Sun, 24 Jan 2027 20:02:12 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=762\u0026min_rtt=556\u0026rtt_var=392\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3282\u0026recv_bytes=1246\u0026delivery_rate=6972712\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=749ecbea7175b463\u0026ts=41\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b05fe31bde412ce5669c0f612516aac9","sha1":"c62bd1f252f9c8c871e76df1a8e4bb374f7c98a3","sha256":"f728c403bd2a8e20cddf61a65fdae71f5295c83fb195e0c4fae3cb0e696f0dd2","sha512":"7d65e8f22d823fea8d1c43e49bbc2c22531bbf88047daf1f1426e6b86b9bbc31074f9634d520d291da62d16961cb280daa6539699c7ec1962f02775466701cfe","ssdeep":"768:JMjGEW3T6OOHnbZmIKUaW5qA2BuYPN4jvfH9LPQSK1LiGpzlt:JM6F6R71kgDzqa39bv0i2lt","tlshash":"d8f2f1848f174a21bdd39578bf5b131c13b5a3c5500026fae6b3640558e2d7abe4ed37","first_seen":"2025-12-30T23:38:20.665452Z","last_seen":"2026-07-23T13:46:57.355701Z","times_seen":95,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":19,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/resource/svg/light/zu447.svg?2.0.1767279284171","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1767279284171 HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\netag: \"692d0dc0-1a4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-07-28T19:28:06.581256Z","times_seen":462,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com/waihui/coinInfo.png?2.0.1767279284171","fqdn":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-rg-china-mainland.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Feb 2025 02:21:06 GMT","end":"Wed, 11 Mar 2026 02:21:05 GMT"},"fingerprint":{"sha1":"FB:DB:9E:CD:BB:14:E6:CC:9A:2F:F2:B3:C9:29:07:04:8A:6E:B9:E3","sha256":"99:EE:93:AA:8F:36:82:A8:97:17:25:A9:72:88:B0:B1:D0:8A:8E:64:F4:3A:93:61:10:71:D9:6C:16:F9:94:92"}}},"request":{"raw":"GET /waihui/coinInfo.png?2.0.1767279284171 HTTP/1.1\r\nHost: dapptubiapp.oss-rg-china-mainland.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 55728\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545760AD53237880F4A\r\nAccept-Ranges: bytes\r\nETag: \"48384A67185DBDFEEF3AA43C99D3319C\"\r\nLast-Modified: Wed, 26 Mar 2025 08:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3192987439189544564\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000105\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SDhKZxhdvf7vOqQ8mdMxnA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-30T19:44:59.567355Z","times_seen":915,"resource_available":false,"data":null}},"time_used":1396,"timings":{"blocked":880,"dns":0,"connect":0,"send":0,"wait":256,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yudiannet.oss-cn-hongkong.aliyuncs.com/waihui/8436221788994335b8bae1de9a9c2202.png?2.0.1767279284171","fqdn":"yudiannet.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /waihui/8436221788994335b8bae1de9a9c2202.png?2.0.1767279284171 HTTP/1.1\r\nHost: yudiannet.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4880\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545BC6A5B3634E9A59D\r\nAccept-Ranges: bytes\r\nETag: \"81BD25A049373BB3701E0AF2F67EAEC0\"\r\nLast-Modified: Wed, 10 Sep 2025 05:05:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4110471830855871015\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gb0loEk3O7NwHgry9n6uwA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4880,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"81bd25a049373bb3701e0af2f67eaec0","sha1":"b7072242a195bda21543d26f07a31ba57c3bfaff","sha256":"b462d924da8a93ed02eb0b016c39443d0eb18bc0d13627c035e14fd9013eb9d3","sha512":"e17d1ac2c5f87616e88b1f51ef169b72a3a85f67266f2dbad95582a30e860aefeabb1bd78e99a266273cbada7c33df40753a38c1299347b1f88eca09196c3b00","ssdeep":"96:HYZfdrzSH+OLwrLsWFEctwgIZmXNCmlFDBgHzGjGttb:HYZfdrzSH+IWFEcNkaCmlFDiHqyttb","tlshash":"75a13b6772d60c41c628369b3ea1b3fc159cdfab2f4adeb9c8618192435267d59c9380","first_seen":"2024-08-19T15:53:11.186024Z","last_seen":"2026-07-28T18:19:13.904396Z","times_seen":48,"resource_available":false,"data":null}},"time_used":1222,"timings":{"blocked":941,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:13 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e3d482ffabe54cb6d31e06e513161f2e","sha1":"50db9ec121a0effd3953bbdd79d49e8f10d38f08","sha256":"cdae7419d76a4165e3fc089ddccb5678b31c98b8a83792a692629bf55f6d0a9f","sha512":"00e31ba7d7db9aa50e4c58323f2c21cbe61740e1fd295005393bc5b628ae998c3b73b80a4fedd3954e59c17fe1a4ff225adee4b10adc62b2a766ca32a5590990","ssdeep":"","tlshash":"ab21004a223c9eb1441611b373ccfdc9a2be1697d6a28d38855fcf2c03f14b91b2b585","first_seen":"2025-12-30T23:38:20.69072Z","last_seen":"2026-04-06T13:36:30.356733Z","times_seen":18,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/currencyItem-e80e4d5c.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/currencyItem-e80e4d5c.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-4b6\"\r\nexpires: Sun, 25 Jan 2026 08:02:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"c5f1771f725aa98a25468d5009242b0d","sha1":"ff52e86cbcef345cee9757622fac27116df85947","sha256":"47df54045e43e0743f3f63a7ab3f150135fe83a98e57c03effa419d51109ba7d","sha512":"890cf6c1340c25218afd2456a70f2f6f353f4496ce0fa38a295c1c0a765f7fe951b804a5ba580f77f9f50345b715cc85a9a48e0160ca969f186c56acd7507120","ssdeep":"","tlshash":"4b21d29a5902c7b1c7be5062857d5414170d7fda700181c5ebed148a3b8b5fcd724a31","first_seen":"2026-01-24T18:29:18.872633Z","last_seen":"2026-01-24T20:02:32.883083Z","times_seen":8,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/resource/svg/light/mengbanzu12.svg?2.0.1767279284171","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1767279284171 HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\netag: \"692d0dc0-322\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-29T22:52:22.742379Z","times_seen":983,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-5cdb4ea9.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:08.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/index-5cdb4ea9.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-19104\"\r\nexpires: Sun, 25 Jan 2026 08:02:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102660,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"4f83029e517c23a313b216ed575a608c","sha1":"941c8d37883af74e5149cd76666739e78d6b21fa","sha256":"0ce4a559b4436cbc39345000ca58137175a66982145170b125aee2ac9bec2b21","sha512":"9dfa93bb6f2272dd3ae7aae8ae7c57ead54f3e358b03250e9fd5e9204501343a5846d6808a1242d45a1bf51fca5c018e82b1be4d23df76c51ae1c5c138b670ee","ssdeep":"768:Dl96CmtgNQsCg/6sfUEN0chkPq+SILe6aZrB1MIVMOVt18eS8Mkh0Tu28ZPhie2R:cmxUNPqvIKrB2eS8Zd2Tj6V0h8LXw","tlshash":"f0a32a8da50b0fff58be0888aa1f580021591fd75d8c88d3b2be6e562bf9ce4535d718","first_seen":"2026-01-24T18:29:18.896269Z","last_seen":"2026-01-24T20:02:32.884084Z","times_seen":8,"resource_available":true,"data":null}},"time_used":685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":685,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/vendor-72ef657d.css","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:08.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-16997\"\r\nexpires: Sun, 25 Jan 2026 08:02:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92567,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:32:04.730749Z","times_seen":353,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1023,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/currencyItem-23dc0535.css","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/currencyItem-23dc0535.css HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-6d6\"\r\nexpires: Sun, 25 Jan 2026 08:02:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"8c2bda1d869b434db3e73feb2f974463","sha1":"d0654c8c16901111d91b7d6601dbb3d570425bf3","sha256":"23dc0535aa91953f71dd7f3f793539b5f1e7839c00a8096ee2947ec3aec99276","sha512":"bf6e976fcece61eea5ca6160a3efa14fad9b743403eab0ee9eeadf24fbbda74f5969fd85eca5f64b349cb97fe8c741ba389cbe21d35083c0afd2ef41958f5705","ssdeep":"","tlshash":"7c31dec553110735db37f486aeb8d514801c7fc1900756d9ec9b26272ccbba34ab0a3a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-14T17:49:40.77999Z","times_seen":51,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yudiannet.oss-cn-hongkong.aliyuncs.com/waihui/45dd42e681904b00aa3d680e776f140c.png?2.0.1767279284171","fqdn":"yudiannet.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /waihui/45dd42e681904b00aa3d680e776f140c.png?2.0.1767279284171 HTTP/1.1\r\nHost: yudiannet.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8633\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545C390C3393157F3E1\r\nAccept-Ranges: bytes\r\nETag: \"BC13CFB09C93AD8E1317CFE28D4C6A92\"\r\nLast-Modified: Wed, 10 Sep 2025 05:03:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12983068572616395445\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vBPPsJyTrY4TF8/ijUxqkg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bc13cfb09c93ad8e1317cfe28d4c6a92","sha1":"a6793d05a14d2fa72ad58b637c060a89527e5818","sha256":"055dc63f00798d1b019c7670334102d4ad419e73edd2c6a194e5518bd21833ef","sha512":"d14399335e042cac0b9470e2e587008803ad807ccde50514cbe858f85d479f48904985c22bf83a74c3983674ca4e648cb13e7378c7c0a98620fcf7fe939e6604","ssdeep":"192:f4Upf6SO/Lclj/8gJjK3mzPZTeCFRrU+XxotbBCUn98cYepj:A4f6D49VkwRT1FRrpq9xrpj","tlshash":"8502afc8a099d3919f1b0d5b4d396d928cf759248a0fbedeb50430bb06a160e93cbd88","first_seen":"2025-12-30T23:38:20.682731Z","last_seen":"2026-04-06T13:36:30.347605Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1958,"timings":{"blocked":838,"dns":9,"connect":274,"send":0,"wait":276,"receive":1,"ssl":557},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com/waihui/bitcoin.png?2.0.1767279284171","fqdn":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-rg-china-mainland.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Feb 2025 02:21:06 GMT","end":"Wed, 11 Mar 2026 02:21:05 GMT"},"fingerprint":{"sha1":"FB:DB:9E:CD:BB:14:E6:CC:9A:2F:F2:B3:C9:29:07:04:8A:6E:B9:E3","sha256":"99:EE:93:AA:8F:36:82:A8:97:17:25:A9:72:88:B0:B1:D0:8A:8E:64:F4:3A:93:61:10:71:D9:6C:16:F9:94:92"}}},"request":{"raw":"GET /waihui/bitcoin.png?2.0.1767279284171 HTTP/1.1\r\nHost: dapptubiapp.oss-rg-china-mainland.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545760AD53434000F4A\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Wed, 26 Mar 2025 08:37:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000105\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-07T05:08:28.2578Z","times_seen":25758,"resource_available":false,"data":null}},"time_used":1687,"timings":{"blocked":724,"dns":5,"connect":237,"send":0,"wait":238,"receive":0,"ssl":479},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yudiannet.oss-cn-hongkong.aliyuncs.com/waihui/77556f9ebc454898a2383fc8bb7f82a7.png?2.0.1767279284171","fqdn":"yudiannet.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /waihui/77556f9ebc454898a2383fc8bb7f82a7.png?2.0.1767279284171 HTTP/1.1\r\nHost: yudiannet.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43084\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545ACF6C535309E6281\r\nAccept-Ranges: bytes\r\nETag: \"CD709C4C49D2CB514D64CE0301D4D78C\"\r\nLast-Modified: Wed, 10 Sep 2025 04:51:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12266219080893469363\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: zXCcTEnSy1FNZM4DAdTXjA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":43084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 136 x 144, 8-bit/color RGB, non-interlaced","md5":"cd709c4c49d2cb514d64ce0301d4d78c","sha1":"f8ff49661bac8c8a3331b32b85909db30dc31513","sha256":"9a2e006100494da5b9c16e155e9f86b6c197f85056ea798893d75355f7391fbf","sha512":"48a2943ccd522e584b35c70e9807b4ac63c9206090450e734e8c9d40cc6faf2496921b322e61a51d6d03ec53c8a838476d0a082e3f9f73091a989f913cb53ad4","ssdeep":"768:cQ5Sd1Bwmt6VL/35C7HaUIOAOFqiyutoYGuytT0WpmjBGpdx0OMJNE+8rD:dG1BkVDJqHaUIOVFrxGZAWurJi+0D","tlshash":"bd13f2dcf9b3d2cc02a8941e151c5c9f40f7600c1635ba5b0e9a5b496abafb958cb292","first_seen":"2025-12-30T23:38:20.659075Z","last_seen":"2026-04-06T13:36:30.350793Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1172,"timings":{"blocked":-1,"dns":1,"connect":282,"send":0,"wait":289,"receive":29,"ssl":570},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T20:02:06.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:07 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 19 Jan 2026 08:07:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696de63d-1528\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5416,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"f4041dc2bdd65419b9d69a5154d8199f","sha1":"163cefe04e07988bf142236a74db29ea1f15c5ec","sha256":"103d9c6761749557a64a6f76e65bfd0dd751f758bd921b8018a0ecd27f249362","sha512":"86b9521a1ecc5b6d83b2cbe8ef994ce4b5a26be2e03cbf0216954498d73373ad9a2e6abdd953cb3ed5084dbb03e231024a3d6b27f5815517d96b41ba6e773008","ssdeep":"96:Tr82bCmK5yKuc676D5mzZdt/xir6TCZydHRH/gO2mUsGKAiowGpuB1niHgiHHH/9:TFVKL67UmveZCxfT2nfD3bpuB1niAinl","tlshash":"b3b16fb39cf5c82f2391122babe7f0089e610193892a5814b4cd54ee4fd1fe585cbbb5","first_seen":"2026-01-24T18:29:18.894825Z","last_seen":"2026-01-24T20:02:32.88657Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1821,"timings":{"blocked":736,"dns":53,"connect":340,"send":0,"wait":342,"receive":0,"ssl":346},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/vendor-64f46974.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:08.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/vendor-64f46974.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-d9242\"\r\nexpires: Sun, 25 Jan 2026 08:02:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":889410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3abf93235f8805aa2deb613de1c2e022","sha1":"3d00674e75280d0c645aab6e995dadb83c2e5e29","sha256":"4d5b7079708762a681efb01593bd187df376929eb2119a74fff768d1cbf01344","sha512":"87d7887c903a132b9189f0b75fdd99897fafd08a343443ded10b564a4120b21a2e703818267814284a0545a8337ffc61e44dc17efd049a48d30898388d199208","ssdeep":"12288:5RnbvFkQvVb8mXXdRLYNmD/ahCVawlVaPeJZ3J/pooTqr9szo/UXRdBE7m+jYhSr:5RnbvFjoiXTLxahCVlSG3WtYioSstI","tlshash":"f31528c97292f06147ab24e240bb0106f3396e59740e84a4f1ad98eb7d79d89d277f3c","first_seen":"2025-12-30T23:38:20.64961Z","last_seen":"2026-07-17T15:48:13.52573Z","times_seen":35,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-bc011be9.css","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\netag: \"69568ab4-18d\"\r\nexpires: Sun, 25 Jan 2026 08:02:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-29T22:52:22.70849Z","times_seen":1464,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com/waihui/ethereum.png?2.0.1767279284171","fqdn":"dapptubiapp.oss-rg-china-mainland.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.101.26.6","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-rg-china-mainland.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Feb 2025 02:21:06 GMT","end":"Wed, 11 Mar 2026 02:21:05 GMT"},"fingerprint":{"sha1":"FB:DB:9E:CD:BB:14:E6:CC:9A:2F:F2:B3:C9:29:07:04:8A:6E:B9:E3","sha256":"99:EE:93:AA:8F:36:82:A8:97:17:25:A9:72:88:B0:B1:D0:8A:8E:64:F4:3A:93:61:10:71:D9:6C:16:F9:94:92"}}},"request":{"raw":"GET /waihui/ethereum.png?2.0.1767279284171 HTTP/1.1\r\nHost: dapptubiapp.oss-rg-china-mainland.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 9807\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545760AD532371C0F4A\r\nAccept-Ranges: bytes\r\nETag: \"12D9722461759CEFFF02D9076A3D2718\"\r\nLast-Modified: Wed, 26 Mar 2025 08:36:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9445008190181339835\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000105\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EtlyJGF1nO//AtkHaj0nGA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.519332Z","times_seen":824,"resource_available":false,"data":null}},"time_used":1810,"timings":{"blocked":777,"dns":6,"connect":254,"send":0,"wait":256,"receive":0,"ssl":513},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-2abcbd85.css","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:08.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/index-2abcbd85.css HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-4a822\"\r\nexpires: Sun, 25 Jan 2026 08:02:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":305186,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"47c9004c23317ead6ecf45daa5d89f6c","sha1":"0dd7f861dbce800cf5a156408d5857874de83110","sha256":"2abcbd858b7a79251ffbd5b6c506dfd08961e952faa5153bad1f003722d934da","sha512":"873d25daf832043d4ee0a427b248ab0f331b4fa698cce45dfdca558f8e64781e65444a65381118a63bc2bf566891b25a0dfbba3108e94224d3dfcbf37aedac2d","ssdeep":"6144:n+B/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05T7:+B/54NZ8w71ZACkFDS3vyf58rBeV05T7","tlshash":"a054c6a9a590117c6f27aa7597ce9ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2025-12-30T23:38:20.654693Z","last_seen":"2026-04-20T23:52:05.436835Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1046,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-848ee411.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/index-848ee411.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-3ccf\"\r\nexpires: Sun, 25 Jan 2026 08:02:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15567,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15566)","md5":"79a83a7bb22b1b89a1686bbd14481911","sha1":"d25c5fc52532cca256e8403f6d3571db00035195","sha256":"3f0870f942cc7b51b8f986e3a3125ba3382f5931a211dfe8802f892846f56795","sha512":"5673a2ff4baf81967e80a23939de78dd4496ee67e6c1d8d1c75426d5b8276392cc53f7e16dafa20b25d909ac51e2d2bdd048d7e90f996fdd90caf3f1ef541c2d","ssdeep":"384:18nzQyVHoiVT2yeHjWvFbb1FUZfXRYIQxsEEnbZWYpKE4fqWCq+:+c6Ht2RHadfDUZfXTuE4fqWCq+","tlshash":"1462d995f806993df6b7e06644890020773a3fdb40098ce1b9be6e462753ff8b759b18","first_seen":"2026-01-24T18:29:18.898971Z","last_seen":"2026-01-24T20:02:32.888803Z","times_seen":8,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/currencyItem-e80e4d5c.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/currencyItem-e80e4d5c.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-4b6\"\r\nexpires: Sun, 25 Jan 2026 08:02:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"c5f1771f725aa98a25468d5009242b0d","sha1":"ff52e86cbcef345cee9757622fac27116df85947","sha256":"47df54045e43e0743f3f63a7ab3f150135fe83a98e57c03effa419d51109ba7d","sha512":"890cf6c1340c25218afd2456a70f2f6f353f4496ce0fa38a295c1c0a765f7fe951b804a5ba580f77f9f50345b715cc85a9a48e0160ca969f186c56acd7507120","ssdeep":"","tlshash":"4b21d29a5902c7b1c7be5062857d5414170d7fda700181c5ebed148a3b8b5fcd724a31","first_seen":"2026-01-24T18:29:18.872633Z","last_seen":"2026-01-24T20:02:32.883083Z","times_seen":8,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getAllSetting","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14088,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"40edd5ca7ac7bce2eec1186b29d95cfe","sha1":"bff77630cb95580f1d78d254436b266c763aa93b","sha256":"55905d77f88849f7f54c2139a15bcf271fe71daf4a22e51eabba0547353db392","sha512":"fa6b1a74bd2b4e292bb7c0b7bcbb904fb5f52b1699b5ca1357bdea685fd71b8803cac6be973abd54ccbc9c6b5fc449c854bb2107d191dbd2823d3f024bdb5553","ssdeep":"384:bGytGjDaFqHXigCj2OGzTj0aH3NyHPWQnb:bGyEjDaFq3igeyj0a9yHOQb","tlshash":"4a52961a32d8dcbd87d75aca90fb39057adc386bd994ec41c4a7ef5c85e99f2480b009","first_seen":"2026-01-24T18:29:18.845868Z","last_seen":"2026-01-24T20:02:32.868307Z","times_seen":8,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getCoinList","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":1665,"timings":{"blocked":666,"dns":0,"connect":334,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-949f9b00.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/index-949f9b00.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 772\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\netag: \"69568ab4-304\"\r\nexpires: Sun, 25 Jan 2026 08:02:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":772,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"36240edd99a68159de1e639b9a1f2405","sha1":"3f72a4bf26ad1ee6d3be18803a1e9b73b068a754","sha256":"cd66e9d55f349c0914a966676b0821ee54f6b11b3a355cf14450de6e43c0635e","sha512":"234f001cc2712374dd26b1250916d55f40e4a4cd123cca8bb40e54aca2f07aa1df6d8c23ae0d4e8c7ab151db3c8b5fd8bfa32be737c11b104e4ac4a43523c648","ssdeep":"","tlshash":"5901d0f8fc1dcebb1f62069401913501140a1fddfa1819f198977e661be4990d7de72d","first_seen":"2025-12-30T23:38:20.678402Z","last_seen":"2026-04-06T13:36:30.358507Z","times_seen":18,"resource_available":true,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/roulette-2d1cc647.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/roulette-2d1cc647.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 144\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\netag: \"69568ab4-90\"\r\nexpires: Sun, 25 Jan 2026 08:02:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"8bb597b81aa59e97fe8514671bfa5fe7","sha1":"6ea0d5fdb6af78ccf7d90652cf3d611c950006cc","sha256":"fac029a50c2e6ce426e527fa2b4ffdd42976ded97fe82b3b054799b7b3039587","sha512":"117e1c5333fc9acd2094c65e26cf521655721aee95a6702cf6b7ee27ce2a88ad02c45d12bcce0b58e3b11051b78b4c7ce045595bb47ae944ee61739cb0c5dfb1","ssdeep":"","tlshash":"90c02b1b8d02c7f381682ccde2d40f84cc3159341ba3d8e000454415036ccd2e1dd000","first_seen":"2026-01-24T18:29:18.941236Z","last_seen":"2026-01-24T20:02:32.88932Z","times_seen":8,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/overlayPulic-8ba8e0b6.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/overlayPulic-8ba8e0b6.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 481\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\netag: \"69568ab4-1e1\"\r\nexpires: Sun, 25 Jan 2026 08:02:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":481,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (480)","md5":"8b19050d602d001c9c71c4141aa12429","sha1":"7d1105408168048b356643a87199937b3c132edb","sha256":"b5fec031d06e0d68e62ec038eb87af0776014e6c7e1ef97377a88c5a9365070d","sha512":"af06819f913325e815d544509c6b4cf1694b3ccad8eaf8ed4b5402619f02c233251cfe29496fa15a553caef1aeda1a66a37fb8e2d5a644b124793756da7f2dd3","ssdeep":"","tlshash":"c6f09e6e2c5a81f14990c0fda12131151d1c7e2ca33993c18cdb312aa3b96a45e1d624","first_seen":"2026-01-24T18:29:18.876205Z","last_seen":"2026-01-24T20:02:32.875658Z","times_seen":8,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/resource/svg/light/mengbanzu13.svg?2.0.1767279284171","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1767279284171 HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d0dc0-4b2\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-07-29T22:52:22.743694Z","times_seen":928,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yudiannet.oss-cn-hongkong.aliyuncs.com/waihui/e607b0b5df9749d39e1aac8a4a7a1b35.png?2.0.1767279284171","fqdn":"yudiannet.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /waihui/e607b0b5df9749d39e1aac8a4a7a1b35.png?2.0.1767279284171 HTTP/1.1\r\nHost: yudiannet.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4880\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545C390C3393188F3E1\r\nAccept-Ranges: bytes\r\nETag: \"81BD25A049373BB3701E0AF2F67EAEC0\"\r\nLast-Modified: Wed, 10 Sep 2025 05:05:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4110471830855871015\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gb0loEk3O7NwHgry9n6uwA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4880,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"81bd25a049373bb3701e0af2f67eaec0","sha1":"b7072242a195bda21543d26f07a31ba57c3bfaff","sha256":"b462d924da8a93ed02eb0b016c39443d0eb18bc0d13627c035e14fd9013eb9d3","sha512":"e17d1ac2c5f87616e88b1f51ef169b72a3a85f67266f2dbad95582a30e860aefeabb1bd78e99a266273cbada7c33df40753a38c1299347b1f88eca09196c3b00","ssdeep":"96:HYZfdrzSH+OLwrLsWFEctwgIZmXNCmlFDBgHzGjGttb:HYZfdrzSH+IWFEcNkaCmlFDiHqyttb","tlshash":"75a13b6772d60c41c628369b3ea1b3fc159cdfab2f4adeb9c8618192435267d59c9380","first_seen":"2024-08-19T15:53:11.186024Z","last_seen":"2026-07-28T18:19:13.904396Z","times_seen":48,"resource_available":false,"data":null}},"time_used":1327,"timings":{"blocked":1048,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-848ee411.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/index-848ee411.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-3ccf\"\r\nexpires: Sun, 25 Jan 2026 08:02:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15567,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15566)","md5":"79a83a7bb22b1b89a1686bbd14481911","sha1":"d25c5fc52532cca256e8403f6d3571db00035195","sha256":"3f0870f942cc7b51b8f986e3a3125ba3382f5931a211dfe8802f892846f56795","sha512":"5673a2ff4baf81967e80a23939de78dd4496ee67e6c1d8d1c75426d5b8276392cc53f7e16dafa20b25d909ac51e2d2bdd048d7e90f996fdd90caf3f1ef541c2d","ssdeep":"384:18nzQyVHoiVT2yeHjWvFbb1FUZfXRYIQxsEEnbZWYpKE4fqWCq+:+c6Ht2RHadfDUZfXTuE4fqWCq+","tlshash":"1462d995f806993df6b7e06644890020773a3fdb40098ce1b9be6e462753ff8b759b18","first_seen":"2026-01-24T18:29:18.898971Z","last_seen":"2026-01-24T20:02:32.888803Z","times_seen":8,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/roulette-2d1cc647.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/roulette-2d1cc647.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 144\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\netag: \"69568ab4-90\"\r\nexpires: Sun, 25 Jan 2026 08:02:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"8bb597b81aa59e97fe8514671bfa5fe7","sha1":"6ea0d5fdb6af78ccf7d90652cf3d611c950006cc","sha256":"fac029a50c2e6ce426e527fa2b4ffdd42976ded97fe82b3b054799b7b3039587","sha512":"117e1c5333fc9acd2094c65e26cf521655721aee95a6702cf6b7ee27ce2a88ad02c45d12bcce0b58e3b11051b78b4c7ce045595bb47ae944ee61739cb0c5dfb1","ssdeep":"","tlshash":"90c02b1b8d02c7f381682ccde2d40f84cc3159341ba3d8e000454415036ccd2e1dd000","first_seen":"2026-01-24T18:29:18.941236Z","last_seen":"2026-01-24T20:02:32.88932Z","times_seen":8,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yudiannet.oss-cn-hongkong.aliyuncs.com/waihui/e1f071798d684de8a0d265c436677158.png?2.0.1767279284171","fqdn":"yudiannet.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.227","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /waihui/e1f071798d684de8a0d265c436677158.png?2.0.1767279284171 HTTP/1.1\r\nHost: yudiannet.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 24 Jan 2026 20:02:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43084\r\nConnection: keep-alive\r\nx-oss-request-id: 69752545BC6A5B3634BDA59D\r\nAccept-Ranges: bytes\r\nETag: \"CD709C4C49D2CB514D64CE0301D4D78C\"\r\nLast-Modified: Wed, 10 Sep 2025 04:52:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12266219080893469363\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: zXCcTEnSy1FNZM4DAdTXjA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":43084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 136 x 144, 8-bit/color RGB, non-interlaced","md5":"cd709c4c49d2cb514d64ce0301d4d78c","sha1":"f8ff49661bac8c8a3331b32b85909db30dc31513","sha256":"9a2e006100494da5b9c16e155e9f86b6c197f85056ea798893d75355f7391fbf","sha512":"48a2943ccd522e584b35c70e9807b4ac63c9206090450e734e8c9d40cc6faf2496921b322e61a51d6d03ec53c8a838476d0a082e3f9f73091a989f913cb53ad4","ssdeep":"768:cQ5Sd1Bwmt6VL/35C7HaUIOAOFqiyutoYGuytT0WpmjBGpdx0OMJNE+8rD:dG1BkVDJqHaUIOVFrxGZAWurJi+0D","tlshash":"bd13f2dcf9b3d2cc02a8941e151c5c9f40f7600c1635ba5b0e9a5b496abafb958cb292","first_seen":"2025-12-30T23:38:20.659075Z","last_seen":"2026-04-06T13:36:30.350793Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1961,"timings":{"blocked":841,"dns":1,"connect":277,"send":0,"wait":277,"receive":2,"ssl":559},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/resource/fonts/DINOT-Medium.otf","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainusdtsaving.com/assets/index-2abcbd85.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\netag: \"692d0dc0-11d88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-30T19:44:59.551352Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/type/defi_activity_type","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:12.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://chainusdtsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:12 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://chainusdtsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.jhyiu-daw.icu/ws/b58007e0-31de-4e0d-8280-6d3be06b2061","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 10:38:53 GMT","end":"Mon, 09 Mar 2026 10:38:52 GMT"},"fingerprint":{"sha1":"42:1C:DD:FB:C5:2A:CC:33:0F:A8:F6:A8:24:9E:6F:C2:16:5F:E6:4F","sha256":"17:3A:A2:FA:20:E4:4E:72:1C:BD:5F:43:17:0F:FA:CE:22:0F:D0:1A:C0:0B:F3:56:E7:79:70:73:F9:F2:80:41"}}},"request":{"raw":"GET /ws/b58007e0-31de-4e0d-8280-6d3be06b2061 HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://chainusdtsaving.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: cLMHXor1IElts247Mh7dqw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Sat, 24 Jan 2026 20:02:12 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://chainusdtsaving.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ey9sak/XQXeyvLTWNnFCYj5bcTY=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":2984,"timings":{"blocked":-1,"dns":1000,"connect":1323,"send":0,"wait":327,"receive":0,"ssl":1327},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/platform/dev/config.js?1769284930455","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /platform/dev/config.js?1769284930455 HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 382\r\nlast-modified: Mon, 01 Dec 2025 03:38:40 GMT\r\netag: \"692d0dc0-17e\"\r\nexpires: Sun, 25 Jan 2026 08:02:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0cc7860a17b657a48cf6a6b1be003d95","sha1":"b34379eb969d9dff83c1dba09506ed3a4ae562da","sha256":"2ab26276b641372ac6f94679f40d96bfae6ddf8ccb7e445adcfa5b6a2f9bd0a0","sha512":"58e454c67c9f8ee48e5b96f37fc9da6f3dfd0337999d59baea42ed7ad41f9252f346e63aca445ba1d35fd76d8a1cc827ad679cd6c60765a2d3af050bf7630dc7","ssdeep":"","tlshash":"ace068f371b8c1209981561f2ddc282bf3c775a24d5d5e2eb8d9a51cae5cc6c24be092","first_seen":"2025-12-30T23:38:20.68691Z","last_seen":"2026-04-10T14:43:55.140157Z","times_seen":20,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":901,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-ed343eaf.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:10.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/index-ed343eaf.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-1205\"\r\nexpires: Sun, 25 Jan 2026 08:02:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4613,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4606)","md5":"c9962bd9d60d3b7af9463e6142650971","sha1":"84cabd6ce8aa86f4d4dece9599c9e9cf52251b50","sha256":"52fd9ecdeeac8ca1bbde38f2ed31ca25ba87de70ed4b9c9ca39e1bd7adc5fdbe","sha512":"038ffbf1938e76423f26ea4879710308de71c3f38e149af481dbb5119d26592dc97b269e0aadcad6d568ab786e77890a6f1633a34cf80a549a58b1e939cd995c","ssdeep":"96:C3+vYlnY5kqD+wHQxc3dbyuiUDzb+T3hvsWb43X89R3jMe:++vYlYuqiwHDdb3Y7hv50XulMe","tlshash":"fd91c698f40285ffea7754804848142121a87ffbb20488f6fbbdad0e67b8879e754320","first_seen":"2026-01-24T18:29:18.877828Z","last_seen":"2026-01-24T20:02:32.891408Z","times_seen":8,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainusdtsaving.com/assets/index-ed343eaf.js","fqdn":"chainusdtsaving.com","domain":"chainusdtsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainusdtsaving.com/","date":"2026-01-24T20:02:11.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainusdtsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 18:43:42 GMT","end":"Sat, 04 Apr 2026 18:43:41 GMT"},"fingerprint":{"sha1":"9B:52:E1:F9:73:CA:45:18:09:14:EB:34:35:00:F5:42:D6:49:EA:8B","sha256":"F4:D0:3B:25:2C:50:AB:2D:49:DE:05:88:ED:11:E3:FD:D8:C8:0E:09:AA:E2:5B:CE:E3:35:0E:57:FF:A0:AB:2E"}}},"request":{"raw":"GET /assets/index-ed343eaf.js HTTP/1.1\r\nHost: chainusdtsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 20:02:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jan 2026 14:54:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568ab4-1205\"\r\nexpires: Sun, 25 Jan 2026 08:02:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4613,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4606)","md5":"c9962bd9d60d3b7af9463e6142650971","sha1":"84cabd6ce8aa86f4d4dece9599c9e9cf52251b50","sha256":"52fd9ecdeeac8ca1bbde38f2ed31ca25ba87de70ed4b9c9ca39e1bd7adc5fdbe","sha512":"038ffbf1938e76423f26ea4879710308de71c3f38e149af481dbb5119d26592dc97b269e0aadcad6d568ab786e77890a6f1633a34cf80a549a58b1e939cd995c","ssdeep":"96:C3+vYlnY5kqD+wHQxc3dbyuiUDzb+T3hvsWb43X89R3jMe:++vYlYuqiwHDdb3Y7hv50XulMe","tlshash":"fd91c698f40285ffea7754804848142121a87ffbb20488f6fbbdad0e67b8879e754320","first_seen":"2026-01-24T18:29:18.877828Z","last_seen":"2026-01-24T20:02:32.891408Z","times_seen":8,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}