{"report_id":"4ddddca3-4d68-488d-9312-520ef2a18466","version":6,"status":"done","tags":[],"date":"2026-04-15T13:47:03Z","url":{"schema":"http","addr":"exxnsx.top","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"title":"Exness Pro","dom":{"size":18647,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12222)","md5":"4d53b222fdc01244f26890cb1fb89449","sha1":"99687584375364f277efcd0e7b3a3edbc632a0cd","sha256":"ccf8405ce7c5a4ed2d9e0e036fcc12454d98825882ef2440c076f7ef0c2bf0d5","sha512":"155742159a2dde7d49806ec9cbdfab1b0923846c15e9248a00c8bfa9e6c95d27841046e58561786b9ac991997610e6b0208f5af527cb647c22a55d919f1a1de0","ssdeep":"192:e6T72+JwYOZCxfx2nfD3b9+GYSH7PsyIZWJ9todTVTcKTOnDQp22QoQLQSQp5Q9V:pEpZCxJ28lSHsYIlI","tlshash":"4382aa35a65040a703bb89c1f2717f1e7ad7e30f800a95017fbc918a1fc3db6ba66566","dom_hash":"domhashb55951872de6136db383d58eb81c7cd2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"exxnsx.top","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T13:47:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":10,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-15T13:46:50Z","timestamp":1776260810,"ip_dst":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":32892,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-15T13:46:50.327516+0000\",\"flow_id\":561135712070188,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32892,\"dest_ip\":\"47.79.64.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shege.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":900,\"bytes_toclient\":3148,\"start\":\"2026-04-15T13:46:49.780844+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-15T13:46:50Z","timestamp":1776260810,"ip_dst":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":32896,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-15T13:46:50.598372+0000\",\"flow_id\":475116107103389,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32896,\"dest_ip\":\"47.79.64.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shege.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-15T13:46:50.031901+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-15T13:46:51Z","timestamp":1776260811,"ip_dst":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":32908,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-15T13:46:51.332757+0000\",\"flow_id\":1458813941723338,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32908,\"dest_ip\":\"47.79.64.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shege.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":900,\"bytes_toclient\":6037,\"start\":\"2026-04-15T13:46:50.798922+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-15T13:46:51Z","timestamp":1776260811,"ip_dst":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":32918,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-15T13:46:51.337518+0000\",\"flow_id\":1523689422734438,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32918,\"dest_ip\":\"47.79.64.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shege.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-15T13:46:50.803942+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-15T13:46:51Z","timestamp":1776260811,"ip_dst":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":32932,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-15T13:46:51.379954+0000\",\"flow_id\":763982722516859,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32932,\"dest_ip\":\"47.79.64.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shege.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":900,\"bytes_toclient\":6037,\"start\":\"2026-04-15T13:46:50.804731+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-15T13:46:51Z","timestamp":1776260811,"ip_dst":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":32938,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-15T13:46:51.385377+0000\",\"flow_id\":2052606055309812,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32938,\"dest_ip\":\"47.79.64.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shege.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":900,\"bytes_toclient\":6037,\"start\":\"2026-04-15T13:46:50.811508+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-15T13:46:51Z","timestamp":1776260811,"ip_dst":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":32952,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-15T13:46:51.580958+0000\",\"flow_id\":1404572799850216,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32952,\"dest_ip\":\"47.79.64.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shege.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":900,\"bytes_toclient\":6037,\"start\":\"2026-04-15T13:46:51.055016+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-15T13:46:51Z","timestamp":1776260811,"ip_dst":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":32966,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-15T13:46:51.586161+0000\",\"flow_id\":1267017882261381,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32966,\"dest_ip\":\"47.79.64.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shege.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-15T13:46:51.055173+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-15T13:46:51Z","timestamp":1776260811,"ip_dst":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":32980,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-15T13:46:51.594450+0000\",\"flow_id\":673449106994592,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32980,\"dest_ip\":\"47.79.64.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shege.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-15T13:46:51.062880+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-15T13:46:51Z","timestamp":1776260811,"ip_dst":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":32940,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-15T13:46:51.599842+0000\",\"flow_id\":1578755198534858,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":32940,\"dest_ip\":\"47.79.64.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shege.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":900,\"bytes_toclient\":3148,\"start\":\"2026-04-15T13:46:51.050378+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"exxnsx.top","ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":36,"request_count":36,"received_data":4544766,"sent_data":14875,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"webapi.exxnsx.top","ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-03-10","domain_rank":0,"first_seen":"2026-04-15T13:47:06.35365Z","last_seen":"2026-04-15T13:47:06.35365Z","alert_count":25,"request_count":25,"received_data":125641,"sent_data":12671,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"shege.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-08-31T12:50:21.336642Z","last_seen":"2026-02-25T18:17:49.000466Z","alert_count":0,"request_count":9,"received_data":191822,"sent_data":4018,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ecd25525c96e1e5642704e04f1179f9c","sha1":"8d537a3821fe7b8e382e559c84daf76b4038347a","sha256":"318d588189b7a79c0a2865c22c01039b1c656d9e62b0ae8fb30405135b505f79","sha512":"ea55a372647b943aad36df344a5382aa199447fdcc955a40ad21dd34f99a65b3d9eed9e9d8b5ac8e038547d46d846cdc116dac737e53e496f1054d2625b20245","ssdeep":"","tlshash":"99c08cc4a0e27d106612641060bf39e89024943b70481b128d94e8482e220b09233f9c","size":145,"data":"","first_seen":"2023-10-27T05:38:28Z","last_seen":"2026-04-15T13:47:38.794615Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"38d3cc150786a8971b43e66091ecc995","sha1":"29d8027856bba6a529d1af9384684143f767433c","sha256":"f1689a1ab60a1f9a5423b7bbc208f16c6bc60d4e4f263f8aaa3fae53affd9fc3","sha512":"00cd8544f61787ad191d2337a111551697261ced07a2c01651568f5b83fe0bfa3ae1b570d52cbb07bcc28e0fdb9d954126b3e8d27b1efa80d1e9c9c0e50def23","ssdeep":"","tlshash":"4dc08cc4a0c32e102612655015bf36e4d0244826b4885b43cc94dc883f230f49233ea8","size":150,"data":"","first_seen":"2025-05-23T04:04:23.025321Z","last_seen":"2026-04-15T13:47:38.789764Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-9396567a.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0575ef52c29ff3273d75d265e8325eae","sha1":"51cef6c33f5c8fdcae85f210c7ffb0dcc84aa08b","sha256":"7cc8505739096fbe0f3db3b14928595d3afe8840a89296b3cf6fe8c7f2e1265b","sha512":"3a89db6521653ca4a3be6539984c893a3f2cc31a6cf7378ed47c987d7556f4a411fb211d781e8575cb9d4a99b5c853ccff726c442eff84752757ac859b1c6fed","ssdeep":"384:bb/VHyGvo0K3NdoXeh5zIuCGZDiAgYO5fRsWtZxnbMptC/6SC:bBSszKoX4IuCGgRsCnbMptC/6j","tlshash":"c442c69af9018e3ce5b7a0000488042036197fdb900898a2f9bd6da67756df8fb5a65d","size":13069,"data":"","first_seen":"2026-04-15T13:47:14.748128Z","last_seen":"2026-04-15T13:47:38.779391Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"381f6fda6c0388aee5a1c91ae4254cff","sha1":"aee4858ea07439cc3e959ceeb9923239af465451","sha256":"768be43d3563bc2e35bd34c00cf59b7c4a33b243455a5e143dbe864e21d3260a","sha512":"5eeaabff72e28d26f419d25b821e23fa7dd6b0b8602b00c14e86a7e11bb9b4c64a55a56bc72f638b6da499a930ae1b344ba647b9d642e556f1297278c38833af","ssdeep":"","tlshash":"b811abfe195a602d6307804e976b7901642250a9401a184177cc9b9dbb9afbdd0cfb8c","size":1048,"data":"","first_seen":"2026-04-15T13:47:14.787573Z","last_seen":"2026-04-15T13:47:38.784921Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/vi-650770c8.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ada834bcb639a97da602c67b4b953782","sha1":"327908a4a98a00bd46d23df8377f4ec2e0c5b903","sha256":"0f3c58af8df0618d9f5f35e282c62342109b0359331f6bc549935b45440256d1","sha512":"3b01c766df4b73318202cb72d396a8ee85bf85e600bf73fc3a83f077aaaae0729adab5e74521ed45ceddd07ce63ba246b88998fea26d041a404fb0e842652ebd","ssdeep":"768:3Ea1ZXweBcGIhMfRNEb6FQnf0dpyqamKL+z60fsSM/6ELQA9Dcqywu6EUxwTQoIq:5BrIhMfRNg6FQf0d7am3iS86wdywu6Er","tlshash":"5a13f7810d64f04a44be4b3bf1ddad065aef6c99e3808e6a0be419f957917232f13736","size":44987,"data":"","first_seen":"2025-08-31T12:50:27.961163Z","last_seen":"2026-04-15T13:47:38.760316Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"02c7567e7297010663b177dba8854791","sha1":"cdacb3bad8a9c66a0824f4a71e32abda492ed4c4","sha256":"7f21bf144a119dbca4e569140dc9ad3f40816f3ae5b02b97f7aa342b479d20cc","sha512":"2f28935f80ca304aa34e9062047c773252d0bd4e16efd2309ce87125164fdfc1da8926f0270e1a016188a8cd3fde83c7b51cc0c947fc2ab6f2e449431a149f7d","ssdeep":"","tlshash":"93c08cc4e0c26e101606645010af29e8a028542b70481b168d94e8482e220b49233f98","size":144,"data":"","first_seen":"2023-10-27T05:38:28Z","last_seen":"2026-04-15T13:47:38.792916Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-85cf5079.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"181435777d76f6b030fe4a877dd07c0e","sha1":"5008f8d7d0ae392b6b6525b4ae159b119e95acc5","sha256":"6450bb55221d212074f0f4c330afbe2126463a2fae452e176b8135e1bf1e4507","sha512":"091bd1f97fec666446132af7413118d3b92d30b108a443a6fec0d2923c70275799c8b1b90c1f80e2a5314c3848f925d59a0fda96cec0f49979858bbdd4f2c089","ssdeep":"","tlshash":"35510a687c1bce326ab14844b39140116f1e67be62015dc931b04c6cdb77e58cf5a3d0","size":2865,"data":"","first_seen":"2026-04-15T13:47:14.780764Z","last_seen":"2026-04-15T13:47:38.781388Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-aff2b1ac.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"f43751f221cb2263ee18755b394dd2b8","sha1":"060b8963bf10797ff8e2f6e7b89af5f0115dafac","sha256":"5161b07f246ba80faa5cc41ab3e19ea23e7d293adfc3a941dcc240304a134399","sha512":"82c79e44bd6d79c2d197e964eaff73163f6d0dbcd7ba6736af905c741a274b0e83a3ad41224c7cc123e16a54285f59abb9343a6db9c0ce8c896fe893c8bda7d0","ssdeep":"","tlshash":"5101b8f9fd1dcfbb1fa2065542902600140a0fedfa2419e598877d662be4850da9f72e","size":776,"data":"","first_seen":"2025-08-31T12:50:27.975783Z","last_seen":"2026-04-15T13:47:38.762725Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f4b0ef69bfa01a97d3bd007c0df93467","sha1":"7297ec63036fff6ab56e3c6446c17c99e5857052","sha256":"11cdbe3cd220250eb771b5fe8b5dfa91bb48f7572f2f1207c04ce63d603c9577","sha512":"a863199d28143de0244ccab8b3370acfa6233b93bba6b509e746d88fc137146e9224960b06de83e791bb5029b2da801403ff416cdf03664a39994865ad4a4852","ssdeep":"","tlshash":"d9c08cc6a0c22d005612682814bf24e49028402670485b028de4d84a3e630f08233ed8","size":144,"data":"","first_seen":"2025-05-23T04:04:23.050644Z","last_seen":"2026-04-15T13:47:38.788737Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e6d3e962516a71a5dfd71a82be0c690d","sha1":"86908949927e8821c59d075717fd46b833b053b0","sha256":"a454f39ec8ac4935f67d5a059a9d703a1e964c0d2c19b7761b5540e0467837fc","sha512":"2ce8924443a653845ff48a387d2f47966532e666108936ea27022dda3b5e350fe6bfb8212465fdcbda66966891556109da9bc53519138926eac452322e831685","ssdeep":"","tlshash":"8ac08cc4a0c2ad005a52642420afa9e890248026b0881b038d98dc982e234b09337ed8","size":155,"data":"","first_seen":"2025-03-09T01:48:23.102005Z","last_seen":"2026-04-15T13:47:38.794124Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b4d97983cb54cafc3d6f925fcb14cce4","sha1":"c49f636010dcf90d108eb4d276b958b93b74028a","sha256":"c07642ad438f287bde5e302b2afa484efb7a1f0a6bb86c9f6f5adb6cebb5d7f3","sha512":"6264b481f6ed3064b8652bbc0438ee1c6851ee083737c4ca252e59a0faf9a56befd13691f2eb6c4131be340303b8923593d346cfc4f9d31ffa957657f5d3dcba","ssdeep":"","tlshash":"3cc08cc4b0d26d102606a55020af2aeca025a47e70481b228c94e8482e220b09233fdc","size":146,"data":"","first_seen":"2025-08-31T12:50:28.038663Z","last_seen":"2026-04-15T13:47:38.79022Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-22T04:15:52.395606Z","times_seen":31645,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"03555c44f968c6dc902ee0500c8b52a5","sha1":"2e16108131a913255f29f6117baf6a023595fae0","sha256":"e7c05a733b52c3243b856e76fa4c12a8bf3ac7d660d3752d1e9d6bb042081403","sha512":"241dd51641121e2798a68c490876a287c5afb2c8f74968ff8b105e042e4be156518b8b9069f8151e150e0b13bbacf33172e85a08b0d849ed5d7b36c08d0bc809","ssdeep":"","tlshash":"15c08cc4a0c22d00560a641058ef24e4a0388426b0885b02cde8d84c2e620b09233ea8","size":147,"data":"","first_seen":"2025-08-31T12:50:28.023618Z","last_seen":"2026-04-15T13:47:38.795513Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c91818842b69609666915dfd41143319","sha1":"c02ed7d43e2e1e2a1ee84d7bd5d41983e620351e","sha256":"d65fc7135dc84e4a9be9cc8f3f989c8713470a3366749c0b9b7d7feafec33d15","sha512":"6a7725da506fbe3d411819c02f824847b1e5940bef3d6042a52b02981f7f05d42c9ad8a330cbc5b2747a38c39ab4fa7bc89eaaa010a976385586dc5c29355335","ssdeep":"","tlshash":"62d023c171c27921550e181510ff24d4906c441bb54c0f41ddd4dc093d170f05637ddc","size":208,"data":"","first_seen":"2025-08-31T12:50:28.040443Z","last_seen":"2026-04-15T13:47:38.785979Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d1cdd02950a78a2d5f9aab21d6a508f","sha1":"f3ee9f1055b3dde2970903f2fce8d06b9bdd51b1","sha256":"721c0b357c1d6602c2807170bc0cd6f3d78b63aabbaf62d4cf664b591b355897","sha512":"63ff7ad2217e99e60c4d9739fbcef288600bdcf63ac04b9f9bc673dad000d836f25898710eb8cc78bcaa9e2e6e5afeb8b9592dd094f13196fb60a30a89f8a4a5","ssdeep":"","tlshash":"05c08cc8a0c23d101a02a41054af36e490248827704c2b428da4dc4c2e220f08233ee8","size":144,"data":"","first_seen":"2024-08-19T21:00:08.518977Z","last_seen":"2026-04-15T13:47:38.787035Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4b3b24b8e482e8a7b444ce7af349727f","sha1":"844bee795b94a812494758cc9aa3af65992905dc","sha256":"e7f9bc85bf4b796af6e82ba4fd757356b433adabe66012dfdfa93394e593343c","sha512":"29ab74e947035d35c9659ce9b43a3ac5543830554fe9d63177a58507b5e805f3ad3453d971115be3931202645396ebdeffbd2166e3240c1835a2222596e20a3d","ssdeep":"","tlshash":"65c08cc4b0c72d002602a91460bf28e89024802b70482b029cd4e8493e230f49233e9c","size":146,"data":"","first_seen":"2025-08-31T12:50:28.028205Z","last_seen":"2026-04-15T13:47:38.793447Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/charting_library/charting_library.min.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-21T18:24:07.158001Z","times_seen":717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e04d9676e31c42caca5a103fe447d70a","sha1":"1a4f934ff08906bf6d6e1737dcc168f3f2e4d7e6","sha256":"9f24b718813d39ff22bd5ac7b1017dd296c34ac7fc4affce0030fdfa61a344fb","sha512":"a369d5d0cc28c5328fac8dc9fd9c60a6d37eabe89f4cd637b1c1c0b6920e138cd3694b1386eaf9ab8126cfd5524d87c2bc31d599c77b096095fe89333c22e1b4","ssdeep":"","tlshash":"e9c08cc4a0c26e102a16651115af28e490284427b0485b128ce4dc482e624b08233ea8","size":148,"data":"","first_seen":"2025-08-31T12:50:28.045473Z","last_seen":"2026-04-15T13:47:38.791836Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a5746966fc9c08bc07dc5651c3057d2c","sha1":"8f8521e4a6721076f18ec6067754e857a026cbdc","sha256":"e579a19de508d1b8d5c12448ff9f3a2ad330cec031c194833605dcd3df85b12f","sha512":"5a83935592dee952dcd24942727c6e288c0362a10a0e8bd19ab9613d95c962ebf016371918c68aaea961e6d93ca6e412e1b992e0f2ce686c866692dedadc6eae","ssdeep":"","tlshash":"11c08cc4a0c22e106612a41150af38e49024442674481b028c94d8482e620b09233e98","size":137,"data":"","first_seen":"2023-10-27T05:38:28Z","last_seen":"2026-04-17T06:27:03.082562Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"89db3a1b767de25cdc7ab51e09707a4d","sha1":"1f579fdc94b33d6a535f1fefb60aaade8691b95f","sha256":"cc6e082114848ad0d30daff2f1d5917fc3ec27be06a0aef51d23b6f6d1212a2a","sha512":"38277c41fa2af3d103a5e60e7a39fe0a91d2c54ddd5a2674e2294d8e3e6bc6fd996271ff94be035c8e0aae0867a25687a1c8209e0ab652bea15b2281adb05e77","ssdeep":"","tlshash":"30c08cc4a0c32d101602641020ef25e49028802770481b028ca4d8493e220b08233edc","size":137,"data":"","first_seen":"2025-05-23T04:04:23.082442Z","last_seen":"2026-04-15T13:47:38.787577Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/vendor-d61668d4.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"3312a5169f210228c63382f40e2b4fef","sha1":"7f78587aba2f8a35cbb72e0e7b0bbf0bbf30fa7b","sha256":"cc3329cd7ebb02ad223ddbf8d5d543afb4a21257aee7e37238702f1bce665518","sha512":"0b0d09eacba56bd1e5c6c8a73e31f3bc72d211e6503dcf64831367c12309c673fe9e4e3467ba7407d22096cc240f30a747668a90a3f9b623bc04755ca350e5ff","ssdeep":"24576:MmwWNSPfDVL4M4NaR6WTwwRTkWXFJftAtp5jYAY:MhWNSPfDuM4NSlRTkWXFJ1AtjYAY","tlshash":"ae353af47692b09507ab60e6007b1403ef396e17341e84a4f16998eb3d79e49d6b3f38","size":1126669,"data":"","first_seen":"2025-08-31T12:50:28.043802Z","last_seen":"2026-04-15T13:47:38.788186Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9b05b75ae1b5a2adcf279a38484319fe","sha1":"140777f7d6aa08141b23b816479a71f7f366d343","sha256":"f35f0a878bfc5fcda79ddae36a3b4a51fc0dd9d4197de16ea0d713dddf73a4c4","sha512":"4aa2740c1b949ac47d698c29b57bf362b1a24322673371079e05580dad044d416a766ead645956445f50040486919260dee2c3473ca8cb6e8cc68d168c667e00","ssdeep":"","tlshash":"e1c08cc5b0c26d005a16641410ef24e490244026708c1b129c98d8582e230b0833be98","size":144,"data":"","first_seen":"2025-08-11T11:53:40.365974Z","last_seen":"2026-04-15T13:47:38.786566Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9b72b4f696b3d45cfd964e4d6d62c896","sha1":"492e21d4c722e1cec6ace1c815222debb993a9ec","sha256":"fa17fa6ebc51750bc1f2c502b5c3d0a6ad785c3ed360e2064b9fabaed5c413ad","sha512":"0369475cb49bee90471d2274ff26b23045e467ebf95ffb804dc88ae78fd8c0202ad7594da716a908316eab574f4f34e145ee6e41477fffd6a4792f2e636a06bc","ssdeep":"","tlshash":"89c08cc4b0e22d101626646020bf26e4a028482770885f028ca4dc483e220f0823bed8","size":144,"data":"","first_seen":"2024-02-26T00:21:31Z","last_seen":"2026-04-15T13:47:38.789204Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-93daf2f4.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"2666bbe57c9eb88a259d876a0cbffcd9","sha1":"b396178a6b58dc0d95b710dc3083e9322bdf0b2f","sha256":"aa0e5d0c02b2eef1db8c53f63060568724bd0d8e117f47a722a0f6c36ed873eb","sha512":"a85da29c40c9f1fe93e3543a9652372382f82e2d97b2b9fd52c78b512545c63fb1f5137acf58da87ff561ce91594668edc027650b0140919cfc466b72c4099a4","ssdeep":"96:DUZX3wYUrblYZ/fqCwGiuUdZP2RbPCwGn1rbVeHwR9W3hrCAs333AE0Drjx:DUZX3wYQYhqCwGC2R+wSzdvehrCt33Af","tlshash":"85a1b88db802c5799bbb648094981421319c7fe5b13944e6f3febc4a77b5eb9e381320","size":4659,"data":"","first_seen":"2026-04-15T13:47:14.76491Z","last_seen":"2026-04-15T13:47:38.768095Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b13204602a23bedbb06522069a6580fa","sha1":"7140804c85857afe57355ce02d947cc24693d249","sha256":"b75fee8a30d58ad2fdd0abc9130863da636458154ecd828b6778932637c7c533","sha512":"dab0492f9be8d21016eafd40ac3349074db29ff1ba2e8c8d1e2dd8c7e3bf1567a8b6e587203cdf1ebae04005c12653ac3c61df8651f7bbec640490a4f6d16374","ssdeep":"","tlshash":"6bc08cd5a0c62d005612652022af34e4a028842ab04c1b02aca4d88d2e630f08237e9c","size":150,"data":"","first_seen":"2025-08-31T12:50:28.029668Z","last_seen":"2026-04-15T13:47:38.790796Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-08d3f40d.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fba44f56d2dae35e40b842dc0f8b225","sha1":"544d2329a52506e8ec863deeeeb65956a5270627","sha256":"38bd73bedeacd6280b76bb12999c682f42ec697ff5f07f0967c0b2db77102bda","sha512":"8aff3488129dfba31cb879b9194b2b58cbfe41496cc295eeb0afdc84a4a18480b3d96a4a683a0aa2ee5050f6626dc709c1b5fda9c83cc958e5dae9ec2f65eed6","ssdeep":"1536:0bjRTxgnc0CgWFtvevX7A7I49lnwtGCZYcFkGXsYzARojtG42HSIkQd3vAGc815c:Uxg2XvevX7SwtGCZ9FkGXNc5H3LhbD1a","tlshash":"ded36d59f5075dbf99fe0498645a0801211c2f879489ccb3b3bbde5227f6cd8b34a728","size":130764,"data":"","first_seen":"2026-04-15T13:47:14.77518Z","last_seen":"2026-04-15T13:47:38.778056Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-22T04:15:52.399612Z","times_seen":35062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2d98b00bcf2eb71792063651c8c77444","sha1":"448b70a28b1e864a5344bbb27b43319b560c0127","sha256":"d362dabc9ca1ad263bcb50b292a22a2fc2a6ed4ceb5c02c71e213d5a38a32a0b","sha512":"2278285f2d24cac768fa5d6be9610225ab512207a81364ec3037dba457cce25e14abd80a7cb1b3b00c0d431fee936d83be1f112151f3ccc7453a64939450a7b3","ssdeep":"","tlshash":"04c08cc4a0d73d001603642151ef34e4a028442670481b038da4d8483e220f08233ed8","size":144,"data":"","first_seen":"2023-10-27T05:38:28Z","last_seen":"2026-04-15T13:47:38.784417Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/#/home","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c95ca2328f4725ac14546efd8ad7ed7c","sha1":"f931cde2613f194066603e4c67eb196dd37392d9","sha256":"f974f53506576a891046e7585bcf5ccc45ea048fdde8534644ec195d94c9c042","sha512":"2a380c5b250032a63ffbc12978db232d5a132e6d3c755e7f8df54347bc8bdc4d7a27b2473e06d2c15a141aad72ce34ba405f6c6c570c3db7d3e1ccb58ac7a241","ssdeep":"","tlshash":"06c08cc6a0c22d105616681090bf25e4d028482eb0482b028c94d8492f630b0c233ed8","size":143,"data":"","first_seen":"2025-08-31T12:50:28.036299Z","last_seen":"2026-04-15T13:47:38.792325Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"exxnsx.top/assets/index-9396567a.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:48.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-9396567a.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-330d\"\r\nexpires: Thu, 16 Apr 2026 01:46:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13069,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13068)","md5":"0575ef52c29ff3273d75d265e8325eae","sha1":"51cef6c33f5c8fdcae85f210c7ffb0dcc84aa08b","sha256":"7cc8505739096fbe0f3db3b14928595d3afe8840a89296b3cf6fe8c7f2e1265b","sha512":"3a89db6521653ca4a3be6539984c893a3f2cc31a6cf7378ed47c987d7556f4a411fb211d781e8575cb9d4a99b5c853ccff726c442eff84752757ac859b1c6fed","ssdeep":"384:bb/VHyGvo0K3NdoXeh5zIuCGZDiAgYO5fRsWtZxnbMptC/6SC:bBSszKoX4IuCGgRsCnbMptC/6j","tlshash":"c442c69af9018e3ce5b7a0000488042036197fdb900898a2f9bd6da67756df8fb5a65d","first_seen":"2026-04-15T13:47:14.748128Z","last_seen":"2026-04-15T13:47:38.779391Z","times_seen":2,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-9396567a.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-9396567a.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-330d\"\r\nexpires: Thu, 16 Apr 2026 01:46:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13069,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13068)","md5":"0575ef52c29ff3273d75d265e8325eae","sha1":"51cef6c33f5c8fdcae85f210c7ffb0dcc84aa08b","sha256":"7cc8505739096fbe0f3db3b14928595d3afe8840a89296b3cf6fe8c7f2e1265b","sha512":"3a89db6521653ca4a3be6539984c893a3f2cc31a6cf7378ed47c987d7556f4a411fb211d781e8575cb9d4a99b5c853ccff726c442eff84752757ac859b1c6fed","ssdeep":"384:bb/VHyGvo0K3NdoXeh5zIuCGZDiAgYO5fRsWtZxnbMptC/6SC:bBSszKoX4IuCGgRsCnbMptC/6j","tlshash":"c442c69af9018e3ce5b7a0000488042036197fdb900898a2f9bd6da67756df8fb5a65d","first_seen":"2026-04-15T13:47:14.748128Z","last_seen":"2026-04-15T13:47:38.779391Z","times_seen":2,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/assets-0d4c3ff9.svg","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/assets-0d4c3ff9.svg HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 446\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\netag: \"6909c120-1be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8436c2b0ce40f7c14a407471475ec1e","sha1":"571fbefb1b9009e26b6b8e4da0716784ca5b55b3","sha256":"0d4c3ff9fc90133060b99d6827a14e088ef86eeb248b59d2d1c8e69b90cfbb93","sha512":"53978bb26299218024022f4c9277917df4d30d62f5c3b9f9169efef3b6cce1d293efd8add49b895fa30af66c44338b2b646a4e24ebb734652e414320bed5acab","ssdeep":"","tlshash":"0af055454b4c3e1ca6228ba89b686364232f50a17aaa83d8ec0d02739200585f83ba88","first_seen":"2025-08-31T12:50:28.014018Z","last_seen":"2026-04-15T13:47:38.78239Z","times_seen":3,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/charting_library/charting_library.min.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:42.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d1a-2a6b\"\r\nexpires: Thu, 16 Apr 2026 01:46:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-21T18:24:07.158001Z","times_seen":717,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-c19bca16.css","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:42.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-c19bca16.css HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-4db40\"\r\nexpires: Thu, 16 Apr 2026 01:46:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":318272,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"32841a1357cdfc83b1c457cf6ec216fd","sha1":"e0f124da5625959c162b9e2bab6dbc05cd03edba","sha256":"c19bca1642f9ae3ade5598eed672c97ac6b18ba1cd22b1fc9bfa444d76090a95","sha512":"f53fb316d27a38426fd5e55f5a004d9cb435a8abec53301355e21abae4be831f9d8a974e5155512a8d53bdf6cc0c0cf15f39a785750773a9e566eb3cfa378681","ssdeep":"6144:n7vxsal1W9EkZ8w71ZACkFDS3vyf58rBeV05Tlpwx09uJPvjcAUsPw:7v1C9dZ8w71ZACkFDS3vyf58rBeV05Tp","tlshash":"2764d7a9a590117c6f27aa759bce4ad8f23ce6719c018de9f20150094fc7ffa2363617","first_seen":"2025-08-31T12:50:28.004372Z","last_seen":"2026-04-15T13:47:38.765765Z","times_seen":3,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getCoinList","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:45 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":1327,"timings":{"blocked":530,"dns":28,"connect":258,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/type/defi_activity_type","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:45.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 677\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":677,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ceeabd0e4514724dc44df260fba78d5b","sha1":"e10ebc2c612c467d223f24202f7be2faef9e2643","sha256":"c2dff2ff4568734f7be75873d73ceca194e82735335205fc8eaa6893276da320","sha512":"ae3bad45638a0fe5fa85ed55c46c27d76c5f39996dccb7a97f9b33eda5f13b886ad5b23b65bc1c15d93647f892bdfe6b0422131eec4888bc39a3b9283d6f43b7","ssdeep":"","tlshash":"b4014404397cd9bb0e9f11e784dca4083ad8162460a8a484e8ba8f3c2ec84610f8e24d","first_seen":"2025-08-31T12:50:27.926794Z","last_seen":"2026-04-15T13:47:38.775307Z","times_seen":4,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getCoinList","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getAllSetting","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/resource/svg/dark/mengbanzu12.svg?2.0.1762246942815","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu12.svg?2.0.1762246942815 HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 774\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\netag: \"65424d1c-306\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a8fdb5cde40e8ebcb2b7fddbe19943e","sha1":"c1560502d0305ec2f9973a5857c7cdd9b56caee7","sha256":"3ab8082b5d02f0e40827f2520fe7d423877d2f8d78c6f41cc11fed84b276a0ee","sha512":"8791e15406186847e2527fae5de31e11f9820322947716a0b54d235607efaae19370d66d1864a78b5f65f84ddb778b46df2474860ae9176d828c6cf958d9aac1","ssdeep":"","tlshash":"4d01f17a5221c15da2434b80c6e93f4092bda29ba2d00448b3a32da54d74f7f55bc996","first_seen":"2025-06-01T04:11:58.700896Z","last_seen":"2026-04-15T13:52:07.306479Z","times_seen":103,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/resource/svg/dark/noyet.svg?2.0.1762246942815","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /resource/svg/dark/noyet.svg?2.0.1762246942815 HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d1c-410f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16655,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71b246997de6e88c2a4b933fb0a52cc4","sha1":"600e8a1d3faf072e527d7b669735a42af3329e1b","sha256":"51d24c53291f23934a6cca8836df3ced319d0a08485e447b2eeb40177e2623c1","sha512":"c126c1ab66c307fa4cf26736e00f5f4c59803c24eb8862c1789b5d7841f7ad0bd26b9d644eda04ad029b5b4f450387dcea10db77d42f3d7628b4f05bdb3015f1","ssdeep":"384:dgGW0qoU56j8qIm2w3b1pzhN7Slagaz3E3MFdwZIx359pGLCNaXYfJCmat:ljqC8qH2wL3Om3lFeIR59pHU0JCzt","tlshash":"2e72c0a80ba55e3067f9e26d921a28efcb94f167c063681bd622735235c20f3176673d","first_seen":"2025-08-13T22:50:23.246756Z","last_seen":"2026-04-15T13:47:38.782953Z","times_seen":6,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shege.oss-cn-hongkong.aliyuncs.com/coin/ethereum.png?2.0.1762246942815","fqdn":"shege.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coin/ethereum.png?2.0.1762246942815 HTTP/1.1\r\nHost: shege.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 15 Apr 2026 13:46:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 9807\r\nConnection: keep-alive\r\nx-oss-request-id: 69DF96CBACF6C5313212CAC3\r\nAccept-Ranges: bytes\r\nETag: \"4449925372601C27C9738AC0B4E5C902-1\"\r\nLast-Modified: Fri, 13 Jun 2025 16:14:38 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 9445008190181339835\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-04-21T18:24:07.103531Z","times_seen":413,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":287,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shege.oss-cn-hongkong.aliyuncs.com/coin/ripple.png?2.0.1762246942815","fqdn":"shege.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coin/ripple.png?2.0.1762246942815 HTTP/1.1\r\nHost: shege.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 15 Apr 2026 13:46:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nConnection: keep-alive\r\nx-oss-request-id: 69DF96CBAB67323236E68972\r\nAccept-Ranges: bytes\r\nETag: \"F14A046BDF7107AB2C4D02341AF18A4F-1\"\r\nLast-Modified: Fri, 13 Jun 2025 16:14:38 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 2919851811578833622\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-21T18:24:07.049526Z","times_seen":442,"resource_available":false,"data":null}},"time_used":1602,"timings":{"blocked":797,"dns":0,"connect":0,"send":0,"wait":269,"receive":1,"ssl":535},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shege.oss-cn-hongkong.aliyuncs.com/coin/binance-coin.png?2.0.1762246942815","fqdn":"shege.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coin/binance-coin.png?2.0.1762246942815 HTTP/1.1\r\nHost: shege.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 15 Apr 2026 13:46:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nConnection: keep-alive\r\nx-oss-request-id: 69DF96CBEE240033396B172B\r\nAccept-Ranges: bytes\r\nETag: \"AA1655FBE9EFA39602CA4FD010EE6EE4-1\"\r\nLast-Modified: Fri, 13 Jun 2025 16:14:38 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 18158548296662870332\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-04-21T18:24:07.114899Z","times_seen":473,"resource_available":false,"data":null}},"time_used":1726,"timings":{"blocked":854,"dns":0,"connect":0,"send":0,"wait":290,"receive":8,"ssl":574},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shege.oss-cn-hongkong.aliyuncs.com/coin/coinInfo.png?2.0.1762246942815","fqdn":"shege.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coin/coinInfo.png?2.0.1762246942815 HTTP/1.1\r\nHost: shege.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 15 Apr 2026 13:46:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 55728\r\nConnection: keep-alive\r\nx-oss-request-id: 69DF96CBE613583139600613\r\nAccept-Ranges: bytes\r\nETag: \"F7B4D2C5D192D4483F6B70056D8D8689-1\"\r\nLast-Modified: Fri, 13 Jun 2025 16:14:38 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 3192987439189544564\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-04-21T18:24:07.157162Z","times_seen":442,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":333,"dns":0,"connect":0,"send":0,"wait":281,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:51.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 47\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f242dd5441ac32186b13ff29c216fd08","sha1":"2e049179bd7f55c799f36a10852551a9cb55ff63","sha256":"c99bdfaec8d7aff909e0839800cd9a9e09a4e4535bb9bedb7e55f4526fc55c99","sha512":"38ec5453f34285d12f9d248c3dd3ddaa91278daaa49c15718699d617ebea82091f29e9369587541c77f60cd370002646db5988cc9cf54451fa1d1cf786fad80b","ssdeep":"","tlshash":"8f9002995c1c8242b88701a5950e1204002436612a25924a4c59522580881a22044858","first_seen":"2026-04-15T13:47:14.756451Z","last_seen":"2026-04-15T13:47:14.756451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:45.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:46 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getCoinList","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:50 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22023,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (22007), with no line terminators","md5":"631739b674a671f6704a595da10b2d94","sha1":"e324175723034ac7262d0dbbdb830d91847126b9","sha256":"02bc9d08d70e5c3148279f8a74fc6c948ab1493b10e2d32d6d327159fab12590","sha512":"757ede7b494d7de05e58f74b8b322a6ae1e84317158a9bca4f5bb99b68ca0ef90163600f8326cafcad0985201e0ce6cae9e942cee21149949fafca6b4d589034","ssdeep":"192:Nx/7AuSUBxRGE2Pbpaij3MgUkdB7QwUQhh5FJxgfJOCJXPAc5mcM0tsrELlns63Q:ACNoel3Q","tlshash":"66a221555528d5b9ca7ec1e12ebf790250cc327fb8c9894bd6da4c8c8ed8eb5160bf02","first_seen":"2026-04-15T13:47:14.75731Z","last_seen":"2026-04-15T13:47:14.75731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getCoinList","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:50 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22023,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (22007), with no line terminators","md5":"631739b674a671f6704a595da10b2d94","sha1":"e324175723034ac7262d0dbbdb830d91847126b9","sha256":"02bc9d08d70e5c3148279f8a74fc6c948ab1493b10e2d32d6d327159fab12590","sha512":"757ede7b494d7de05e58f74b8b322a6ae1e84317158a9bca4f5bb99b68ca0ef90163600f8326cafcad0985201e0ce6cae9e942cee21149949fafca6b4d589034","ssdeep":"192:Nx/7AuSUBxRGE2Pbpaij3MgUkdB7QwUQhh5FJxgfJOCJXPAc5mcM0tsrELlns63Q:ACNoel3Q","tlshash":"66a221555528d5b9ca7ec1e12ebf790250cc327fb8c9894bd6da4c8c8ed8eb5160bf02","first_seen":"2026-04-15T13:47:14.75731Z","last_seen":"2026-04-15T13:47:14.75731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T13:46:41.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:42 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-159f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5535,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"9f7661fddd8d6f0981d70d041a1ce8fa","sha1":"86ea12625889d55e60e842b493bc743e3ac1c63b","sha256":"3c1673226506ba2c064131eefb9f20f02c477667e6a152a89ec6a0027ba2905c","sha512":"6cbfe32ee4ee5339c64efef0c0fcbe1ec12cc021d3cbd0e5316ab3a6bb1f8e0132ce42073f154a33b95f59844503c03e2bc9c36d5289f43f0b67edce0a5508d6","ssdeep":"96:+r82zLWf53uSPK7+JJhLWzsLuLYt/LYLFr6TCZydHRH/gvz2mUsGKAiowGwuB1nO:+Fm9PU+JJbOZCxfi2nfD3bwuB1niXilO","tlshash":"c0b161b35ce5c81a23b6012bebe7b11cdb614193851a5810b5cc80ee8fe1fd588c7b7a","first_seen":"2026-04-15T13:47:14.758453Z","last_seen":"2026-04-15T13:47:38.765024Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1382,"timings":{"blocked":564,"dns":54,"connect":251,"send":0,"wait":253,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/vendor-d61668d4.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/vendor-d61668d4.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-11310d\"\r\nexpires: Thu, 16 Apr 2026 01:46:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1126669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"07c908774bbfe8c95440f1aabe3e206a","sha1":"6befe6dc55bff61d724117a28063314992df1e00","sha256":"cd807cc286750b23c944be7c0c9a83682db749a9d109ac49e3fc01f225864add","sha512":"c434464f4053bd8565696cc64e9ac0e59b618bfe6cabdc514008960c19ab64dd407d2e03f83c4e1fcc037a28d5ebc4249db6e2ad9d7e88193f474d4e9b52f601","ssdeep":"24576:MmwWNSPfDVL4M4NaR6WTwwRTkWXFJftAtp5N:MhWNSPfDuM4NSlRTkWXFJ1AtN","tlshash":"222539f47692b09507ab60e6407b1403eb3c6e17305e84a4f16998eb3d79e49d6b3f38","first_seen":"2025-08-31T12:50:27.907882Z","last_seen":"2026-04-15T13:47:38.766464Z","times_seen":3,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/resource/fonts/DINOT-Medium.otf","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exxnsx.top/assets/index-c19bca16.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-04-21T18:24:07.150455Z","times_seen":692,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:51.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 47\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"04992512433cd7fe5726d46c06199e33","sha1":"12e3a30b41b319ce79225c81f7819e0469947fe9","sha256":"ce0d2604394f13b6cb95e6628a931808105ae582c2551a65dfc246838776f9f4","sha512":"141656e602db9e1a40320c8dea86ee1877f640063b4f0a54bcae28b9a04da736a6438502eda248fa39f40e0fd27c128b2d4160131971d3df0cd8078b7d4eaaa6","ssdeep":"","tlshash":"379002956c1c8246b88700a5950e5608012431602624d2484c595129c0881a22044858","first_seen":"2026-04-15T13:47:14.760986Z","last_seen":"2026-04-15T13:47:14.760986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getCoinList","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:45 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":1323,"timings":{"blocked":533,"dns":26,"connect":252,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-bc011be9.css","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:48.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\netag: \"6909c120-18d\"\r\nexpires: Thu, 16 Apr 2026 01:46:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-21T18:24:07.042878Z","times_seen":443,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 522\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":522,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3a96e6f613130dbe071113f75afb533a","sha1":"95addcb1fffe90139ee4fa80ac4d59960219cb18","sha256":"ef2239cb61a17e402a53ebdbf42b973b4a6d49f608dca05ae7bf8c35cc8012ba","sha512":"2a14f845e330a2a50306f3badaf95c4ef3df8710ab66db0107c0bb1e01387f2430a5854bb7670708ef98d782dd140b01dd0c5b3a9a022342e844df8cef80e90d","ssdeep":"","tlshash":"a2f0590a1134ee764d4a94cb52cdb5cc11fa1a059a9c4a24ca6bce5c45c6b761f0b548","first_seen":"2025-08-31T12:50:28.002689Z","last_seen":"2026-04-15T13:47:14.762442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getAllSetting","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:50 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12547,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"781c73c6fa32475a65d9c553ed3c04bd","sha1":"fdf7f5acc384022af091ac5c3f697f7ccaeb3914","sha256":"533ceb0bfab72e6aa47fcb1c9e177c6157e3648092dcb21800dc582c2ea4547d","sha512":"31784be16962d5dc5376a4254b57ae0580bca20e5fc0cebd6021832c038a45679e695e324b72a386209364bd04d5bd4e85c5ba645bb560c522988d98e3987d56","ssdeep":"192:xQKd582F6ky0z08N2c2FGVPLulWYAUnEjba1AGZ5h6FqhI+h3YpvIxSVoyGc+rSS:jcE/sZ52qmQhXGHKn","tlshash":"8a42830635ccd8bdcbe648d690bb7a8670dc356fa1c4d449bab9ad8c799cdb3440b309","first_seen":"2026-04-15T13:47:14.763175Z","last_seen":"2026-04-15T13:47:38.757809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-35653d48.css","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:48.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-35653d48.css HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-a01\"\r\nexpires: Thu, 16 Apr 2026 01:46:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"ffc524542398bc9820bcf9ecf195ca3c","sha1":"ff79a3a1abf96a9e5b5b5a0e417b74066b9126a5","sha256":"35653d480115ec8869a340373b9e17fa1cd8d27a0ff92c6349f4a20661459fee","sha512":"20083b72c8c7869f271e2e6881d489406e3bf61e122d5d6cfcf0eb50a51b7465e4a5aeaf02d57c2dfda30c212e05904ef2076a283bf10e93fe6eed08539e4453","ssdeep":"","tlshash":"a1510e4dbbe921385c7bda8faea85f4890006e82e2479d95f043871709cf6a7262131e","first_seen":"2025-08-31T12:50:27.941637Z","last_seen":"2026-04-15T13:47:38.758707Z","times_seen":3,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-93daf2f4.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-93daf2f4.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-1233\"\r\nexpires: Thu, 16 Apr 2026 01:46:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4659,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4652)","md5":"2666bbe57c9eb88a259d876a0cbffcd9","sha1":"b396178a6b58dc0d95b710dc3083e9322bdf0b2f","sha256":"aa0e5d0c02b2eef1db8c53f63060568724bd0d8e117f47a722a0f6c36ed873eb","sha512":"a85da29c40c9f1fe93e3543a9652372382f82e2d97b2b9fd52c78b512545c63fb1f5137acf58da87ff561ce91594668edc027650b0140919cfc466b72c4099a4","ssdeep":"96:DUZX3wYUrblYZ/fqCwGiuUdZP2RbPCwGn1rbVeHwR9W3hrCAs333AE0Drjx:DUZX3wYQYhqCwGC2R+wSzdvehrCt33Af","tlshash":"85a1b88db802c5799bbb648094981421319c7fe5b13944e6f3febc4a77b5eb9e381320","first_seen":"2026-04-15T13:47:14.76491Z","last_seen":"2026-04-15T13:47:38.768095Z","times_seen":2,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/resource/svg/dark/zu447.svg?2.0.1762246942815","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /resource/svg/dark/zu447.svg?2.0.1762246942815 HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\netag: \"65424d1c-1a4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-04-21T18:24:07.10046Z","times_seen":322,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shege.oss-cn-hongkong.aliyuncs.com/coin/bitcoin.png?2.0.1762246942815","fqdn":"shege.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coin/bitcoin.png?2.0.1762246942815 HTTP/1.1\r\nHost: shege.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 15 Apr 2026 13:46:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 69DF96CAE613583139080613\r\nAccept-Ranges: bytes\r\nETag: \"4BBB774073C62BF09C1C868309DD41D9-1\"\r\nLast-Modified: Fri, 13 Jun 2025 16:14:38 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-21T18:24:19.170324Z","times_seen":21055,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":272,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/resource/fonts/Arial.ttf","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:43.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exxnsx.top/assets/index-c19bca16.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-04-21T18:24:07.137303Z","times_seen":988,"resource_available":false,"data":null}},"time_used":1033,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":645,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/home_bg-2e5fa70f.png","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/home_bg-2e5fa70f.png HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-469b1\"\r\nexpires: Fri, 15 May 2026 13:46:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":289201,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 896 x 1056, 8-bit/color RGBA, non-interlaced","md5":"1bd703871f93c7861f1b45d7a93e0a32","sha1":"b33426e3955fa68d0582b86526ce6245c6d5b177","sha256":"2e5fa70f13e2425e6793e1c156ce5f3c59f69ddf56c663d65c24ecd0e3e11e6b","sha512":"f8e511be4d6b56094eac59fd96dd102352029a8c7f5e5e450bf300e3c38d6e37302a13ab026cf44dc605a270fd1d704188544297ef9bfa04b1a36ecccf84c45a","ssdeep":"6144:jv3KjWdSuT2KWV+FRryLledbjR8hCTwaYrqyp5EUWQ4:T3QWCVV+veZCbNFKq/UG","tlshash":"1754239b3cd04c3ffac19278732d5935752e01320ef693382eade9b02b0e6d21556979","first_seen":"2025-07-14T16:48:46.891797Z","last_seen":"2026-04-16T19:37:59.403987Z","times_seen":63,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/vi-650770c8.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/vi-650770c8.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-afdb\"\r\nexpires: Thu, 16 Apr 2026 01:46:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45019,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (39695)","md5":"ada834bcb639a97da602c67b4b953782","sha1":"327908a4a98a00bd46d23df8377f4ec2e0c5b903","sha256":"0f3c58af8df0618d9f5f35e282c62342109b0359331f6bc549935b45440256d1","sha512":"3b01c766df4b73318202cb72d396a8ee85bf85e600bf73fc3a83f077aaaae0729adab5e74521ed45ceddd07ce63ba246b88998fea26d041a404fb0e842652ebd","ssdeep":"768:3Ea1ZXweBcGIhMfRNEb6FQnf0dpyqamKL+z60fsSM/6ELQA9Dcqywu6EUxwTQoIq:5BrIhMfRNg6FQf0d7am3iS86wdywu6Er","tlshash":"5a13f7810d64f04a44be4b3bf1ddad065aef6c99e3808e6a0be419f957917232f13736","first_seen":"2025-08-31T12:50:27.961163Z","last_seen":"2026-04-15T13:47:38.760316Z","times_seen":3,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getAllSetting","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:45 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":1317,"timings":{"blocked":528,"dns":25,"connect":252,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:45.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:46 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-52027660.css","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:48.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-52027660.css HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-2c7b\"\r\nexpires: Thu, 16 Apr 2026 01:46:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11387,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11386)","md5":"66a23aeba64cf86e71fb9f1304eac9c7","sha1":"ef1b14802064ac492a4fe8c1c57ba9f76d3b5bd8","sha256":"52027660643fe0954ccd5a8556263cde9566d4a1fd7a4ba8708b2206cc7d899d","sha512":"72461fdac07706fa8323c20551de96de9406fd4889e1476379ef2257d3ab825d093a12119333ceea0c7916ffc83fd1aa249ccdc17df3a9254d03500c4fb3b130","ssdeep":"192:6sxMDnBQEJ7KumuAZUPQAN9EYvMqLEIxijeRmkdgELcukbkFwJjMG:6sGnBBJ7KuHWUPQAN7Em6","tlshash":"ba32442df3a42638bc3bd066bfd84acce21ab911d693edd4e917a51208d76e3173005d","first_seen":"2026-04-15T13:47:14.76895Z","last_seen":"2026-04-15T13:47:38.770726Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-aff2b1ac.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:48.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-aff2b1ac.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\netag: \"6909c120-308\"\r\nexpires: Thu, 16 Apr 2026 01:46:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"f43751f221cb2263ee18755b394dd2b8","sha1":"060b8963bf10797ff8e2f6e7b89af5f0115dafac","sha256":"5161b07f246ba80faa5cc41ab3e19ea23e7d293adfc3a941dcc240304a134399","sha512":"82c79e44bd6d79c2d197e964eaff73163f6d0dbcd7ba6736af905c741a274b0e83a3ad41224c7cc123e16a54285f59abb9343a6db9c0ce8c896fe893c8bda7d0","ssdeep":"","tlshash":"5101b8f9fd1dcfbb1fa2065542902600140a0fedfa2419e598877d662be4850da9f72e","first_seen":"2025-08-31T12:50:27.975783Z","last_seen":"2026-04-15T13:47:38.762725Z","times_seen":3,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/resource/svg/dark/mengbanzu13.svg?2.0.1762246942815","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu13.svg?2.0.1762246942815 HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d1c-4a1\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1185,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ed9f9b6d12bd8c03bbd38cb6734207b","sha1":"ae379a9b431428b493abbd53c1a5d3db643bdf5d","sha256":"4459f6b2e766c434b3cf0746ee2939f7c05b588bf5ab4901f6d9427e602f4d91","sha512":"43b0c19361ca45562e501bc37a4ae4424f578dfe49b1fea83507052d085c72b01ec712aa7bcd9e5aefb743a9fd835f882afa8a7c335fc95bf6934ea8d5a3d9a7","ssdeep":"","tlshash":"172163b8c51152ca62814f88dbe82606623ef167f3f54d9cf39016b20e78d9f15bca21","first_seen":"2025-06-01T04:11:58.699477Z","last_seen":"2026-04-15T13:47:38.783448Z","times_seen":74,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/resource/svg/dark/zu29.svg?2.0.1762246942815","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /resource/svg/dark/zu29.svg?2.0.1762246942815 HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 837\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\netag: \"65424d1c-345\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":837,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"357e9e22a01768dc0a074a8cd1556131","sha1":"2d45da133bcf125352b92ac22ce445819d6de392","sha256":"16f5917f9b8a87e02921ef6461afe3b3b1d1d529715cbf184ec1de62f0d2259f","sha512":"777463938489448aa26f2721b2e395769f0915cec5f794ffde8414555a24101646a28535f9021a5595fe027a814eae081d8c33fd6f1f851f0d74fc49118c2048","ssdeep":"","tlshash":"d60112be4736a3fdd5544a80aad42699343de042e16404ecb3817e17be2062a0abcd91","first_seen":"2025-06-01T04:11:58.667223Z","last_seen":"2026-04-15T13:47:38.780917Z","times_seen":73,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:51 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/platform/dev/config.js?1776260804787","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /platform/dev/config.js?1776260804787 HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-18a\"\r\nexpires: Thu, 16 Apr 2026 01:46:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-21T18:24:07.039375Z","times_seen":321,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":471,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:46.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 47\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f7b6da30a0815270164cb8d6a999040","sha1":"6ca1053cea6e9c653b0913ef9a68a9b64c1bff4a","sha256":"3a74639b01596f78d1cfd25aa3361a124481afbb3dfc707b00153f8c27bce110","sha512":"f8e982eb239574e1e175f629cdacea40ac890ef6d595181cc200cba04d8e891858beccfbdadeb3d0cde1aed91f2b8abc2f5ca374e9ab8ee28a178756ad640c3f","ssdeep":"","tlshash":"e89002565c1c8243b88700e5951e220400343164262492484c59912580981a22145858","first_seen":"2026-04-15T13:47:14.771935Z","last_seen":"2026-04-15T13:47:14.771935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:46.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 47\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d5fd769dd1284e11a34e2d32ee3fac87","sha1":"9b76c3b07ca07040df82424075653d78e438aca8","sha256":"ba61aeefbe09ad7b02d00c4dde2c561e60e2ddd64e842cff7fa56010122d581b","sha512":"ae87f9edcd96aa1ea31c81df1e56f1575d7f2c32d8d1db7e617062f30f92fd3cf461abf03a2bfb2dbf46695b02c6505074f99ee58cba271d22d0cdba6a220595","ssdeep":"","tlshash":"549002555c1c8242b88700a5950e525500247160262492485c699125a0981a22055858","first_seen":"2026-04-15T13:47:14.772721Z","last_seen":"2026-04-15T13:47:14.772721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-aff2b1ac.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-aff2b1ac.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\netag: \"6909c120-308\"\r\nexpires: Thu, 16 Apr 2026 01:46:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"f43751f221cb2263ee18755b394dd2b8","sha1":"060b8963bf10797ff8e2f6e7b89af5f0115dafac","sha256":"5161b07f246ba80faa5cc41ab3e19ea23e7d293adfc3a941dcc240304a134399","sha512":"82c79e44bd6d79c2d197e964eaff73163f6d0dbcd7ba6736af905c741a274b0e83a3ad41224c7cc123e16a54285f59abb9343a6db9c0ce8c896fe893c8bda7d0","ssdeep":"","tlshash":"5101b8f9fd1dcfbb1fa2065542902600140a0fedfa2419e598877d662be4850da9f72e","first_seen":"2025-08-31T12:50:27.975783Z","last_seen":"2026-04-15T13:47:38.762725Z","times_seen":3,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shege.oss-cn-hongkong.aliyuncs.com/coin/tron.png?2.0.1762246942815","fqdn":"shege.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coin/tron.png?2.0.1762246942815 HTTP/1.1\r\nHost: shege.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 15 Apr 2026 13:46:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 69DF96CBACF6C5313276CAC3\r\nAccept-Ranges: bytes\r\nETag: \"FB0605E690DEC98F2DF25DF64005EC40-1\"\r\nLast-Modified: Fri, 13 Jun 2025 16:14:39 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-04-21T18:24:07.116635Z","times_seen":398,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":348,"dns":0,"connect":0,"send":0,"wait":297,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getAllSetting","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:45.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:45 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12547,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"781c73c6fa32475a65d9c553ed3c04bd","sha1":"fdf7f5acc384022af091ac5c3f697f7ccaeb3914","sha256":"533ceb0bfab72e6aa47fcb1c9e177c6157e3648092dcb21800dc582c2ea4547d","sha512":"31784be16962d5dc5376a4254b57ae0580bca20e5fc0cebd6021832c038a45679e695e324b72a386209364bd04d5bd4e85c5ba645bb560c522988d98e3987d56","ssdeep":"192:xQKd582F6ky0z08N2c2FGVPLulWYAUnEjba1AGZ5h6FqhI+h3YpvIxSVoyGc+rSS:jcE/sZ52qmQhXGHKn","tlshash":"8a42830635ccd8bdcbe648d690bb7a8670dc356fa1c4d449bab9ad8c799cdb3440b309","first_seen":"2026-04-15T13:47:14.763175Z","last_seen":"2026-04-15T13:47:38.757809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/trade-5c95dc57.svg","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/trade-5c95dc57.svg HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 561\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\netag: \"6909c120-231\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":561,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac86284364191d0fd51f3acde20934fe","sha1":"79df2ab05efcbefff3f5a8f495086996ecdb4edc","sha256":"5c95dc57f290ebcf6d888bd66066774b645bc4c444ac4546c3aa07f5ef93081b","sha512":"e82c362384d99bc2e2f1719f47a1fd4c5233861bb9ed49df632a338b7ab1d0a22cf71dffd5626d8f6f2b1c3afc7386ff91e07ba04077daee849bebf557f80164","ssdeep":"","tlshash":"96f0c2a739cdbc16e22350a2fd1436b5600e81ff898c8628f45108278a196d7643b125","first_seen":"2025-08-31T12:50:27.952324Z","last_seen":"2026-04-15T13:47:38.780336Z","times_seen":3,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-08d3f40d.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:42.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-08d3f40d.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-1fecc\"\r\nexpires: Thu, 16 Apr 2026 01:46:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130764,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65482), with no line terminators","md5":"9fba44f56d2dae35e40b842dc0f8b225","sha1":"544d2329a52506e8ec863deeeeb65956a5270627","sha256":"38bd73bedeacd6280b76bb12999c682f42ec697ff5f07f0967c0b2db77102bda","sha512":"8aff3488129dfba31cb879b9194b2b58cbfe41496cc295eeb0afdc84a4a18480b3d96a4a683a0aa2ee5050f6626dc709c1b5fda9c83cc958e5dae9ec2f65eed6","ssdeep":"1536:0bjRTxgnc0CgWFtvevX7A7I49lnwtGCZYcFkGXsYzARojtG42HSIkQd3vAGc815c:Uxg2XvevX7SwtGCZ9FkGXNc5H3LhbD1a","tlshash":"ded36d59f5075dbf99fe0498645a0801211c2f879489ccb3b3bbde5227f6cd8b34a728","first_seen":"2026-04-15T13:47:14.77518Z","last_seen":"2026-04-15T13:47:38.778056Z","times_seen":2,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/platform/dev/favicon.ico?2.0.1762246942815","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1762246942815 HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:44 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 32022\r\nlast-modified: Tue, 03 Jun 2025 11:31:20 GMT\r\netag: \"683edd08-7d16\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32022,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"f0de92986973b7cc9eb208c76853c523","sha1":"1434fca7a3fe4b09ccc5da05500314358bbb1b73","sha256":"1609b108429560d67355a12ad9bf805244100de005da7951dbfa2edd02378932","sha512":"ea30a3763ba9e92692e74ffab1732be0c40b86bf7f36222cfd3ff05499d70c95747aa4c84f615b09945f47ca9e9eb8929b0d78eb696f407651c0d6a60f865391","ssdeep":"384:K399pYsO9UeT60oc+doG0U8iKUvT1bQO0D6lt2U/TkNaOmyDO:+5Y/2eT6+MgiD7q2iBaLyy","tlshash":"a3e26e63a2c667b4d0e53af694ead2e9c8470e57c9f6049e12b4ff443e3c5a66d38081","first_seen":"2025-08-31T12:50:27.948169Z","last_seen":"2026-04-15T13:47:38.77868Z","times_seen":3,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getCoinList","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:45.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:45 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22023,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (22007), with no line terminators","md5":"ae298a20b654a325382070d7a85e307c","sha1":"86d92e688e42d99a6bfec60d6681b8fb36b6e3fd","sha256":"1cfaf614c62a93f33dc102acebe4d94595483dfd9b23a45856986d95e2887791","sha512":"af0c090b757190fc39fbe5d2afa25c52d987d87eb6fbb3384852dd30353d05ece73aad9c6e56ec28bc1b436ecbb94ed54f366374a246347f073bc6388307a8a5","ssdeep":"192:9J/cxukUBIRpE24ip0iq3JgNrdm7NwUQhx5JJ/fJLC7XzAh5mcG0nsr5LlAsL3Q:u8YOyI3Q","tlshash":"b8a222555528d5b9da7ec1e12ebf390250cc327fb8c9894bd6ca4c8c8ed8eb5160bf02","first_seen":"2026-04-15T13:47:14.776944Z","last_seen":"2026-04-15T13:47:14.776944Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:50 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/vendor-d61668d4.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:43.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/vendor-d61668d4.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-11310d\"\r\nexpires: Thu, 16 Apr 2026 01:46:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1126669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"07c908774bbfe8c95440f1aabe3e206a","sha1":"6befe6dc55bff61d724117a28063314992df1e00","sha256":"cd807cc286750b23c944be7c0c9a83682db749a9d109ac49e3fc01f225864add","sha512":"c434464f4053bd8565696cc64e9ac0e59b618bfe6cabdc514008960c19ab64dd407d2e03f83c4e1fcc037a28d5ebc4249db6e2ad9d7e88193f474d4e9b52f601","ssdeep":"24576:MmwWNSPfDVL4M4NaR6WTwwRTkWXFJftAtp5N:MhWNSPfDuM4NSlRTkWXFJ1AtN","tlshash":"222539f47692b09507ab60e6407b1403eb3c6e17305e84a4f16998eb3d79e49d6b3f38","first_seen":"2025-08-31T12:50:27.907882Z","last_seen":"2026-04-15T13:47:38.766464Z","times_seen":3,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getCoinList","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:45.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: vi\r\nlang: vi\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:45 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22023,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (22007), with no line terminators","md5":"ae298a20b654a325382070d7a85e307c","sha1":"86d92e688e42d99a6bfec60d6681b8fb36b6e3fd","sha256":"1cfaf614c62a93f33dc102acebe4d94595483dfd9b23a45856986d95e2887791","sha512":"af0c090b757190fc39fbe5d2afa25c52d987d87eb6fbb3384852dd30353d05ece73aad9c6e56ec28bc1b436ecbb94ed54f366374a246347f073bc6388307a8a5","ssdeep":"192:9J/cxukUBIRpE24ip0iq3JgNrdm7NwUQhx5JJ/fJLC7XzAh5mcG0nsr5LlAsL3Q:u8YOyI3Q","tlshash":"b8a222555528d5b9da7ec1e12ebf390250cc327fb8c9894bd6ca4c8c8ed8eb5160bf02","first_seen":"2026-04-15T13:47:14.776944Z","last_seen":"2026-04-15T13:47:14.776944Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/quote-f0726301.svg","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/quote-f0726301.svg HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 329\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\netag: \"6909c120-149\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":329,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7da6cbfed50662ce8c93fbd152e5a69a","sha1":"c365a96c72f24db6370a4209d2d58a1a75cdeb74","sha256":"f0726301b9d10b882643168dcf78ba2d5e58b125ae469d7de8638c0235f7917e","sha512":"cfa8ac17f948f7397188be2077be4ff796e7f7f3617f334033e4b91c3533739e3ac539fe270de72ff171354d6fe40c8a7ed3c23b26f6245e39a2f7bf8ccc890c","ssdeep":"","tlshash":"dce0267e758c6d2ef63340bafd183771016e52e34edd4224f811003786156db643b16c","first_seen":"2025-08-31T12:50:27.881103Z","last_seen":"2026-04-15T13:47:38.774541Z","times_seen":3,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shege.oss-cn-hongkong.aliyuncs.com/cryptonseeb2323b1d8641a7afe345591beefafb.jpg?2.0.1762246942815","fqdn":"shege.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /cryptonseeb2323b1d8641a7afe345591beefafb.jpg?2.0.1762246942815 HTTP/1.1\r\nHost: shege.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 15 Apr 2026 13:46:50 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 15039\r\nConnection: keep-alive\r\nx-oss-request-id: 69DF96CAE613583139A60513\r\nAccept-Ranges: bytes\r\nETag: \"5993B9F01F63851D601BC0FEBC78B45F-1\"\r\nLast-Modified: Fri, 13 Jun 2025 14:32:31 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 407242369367560864\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":15039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 600x452, components 3","md5":"110a2f45d079c4bf7a0f05324e50a181","sha1":"ccdfe14847ed920ea7c3a563283d7f5adb1d6a26","sha256":"006e8a36d57e42ccd89f0657e853d115cdb5201ddf1595c367979d25bd2f1eca","sha512":"66592ba6633b848e183e451f156b9d260e14c3f89bd2d0f659290cad65b301cebca69f96fdba0f2da4597f09237fdceb0b92fea7b7ad15769a4f82ed730d3ba1","ssdeep":"384:Gk7crokG7S6hAJ9np9ywJMae1Gcn5V18zV:GKc0kMFhAXBMagGc5V18zV","tlshash":"f462d0c28f3c582cf1e785367ef46b241147a06d4e1869fabca15785ea3d87189fc92c","first_seen":"2025-08-31T12:50:28.019347Z","last_seen":"2026-04-15T13:47:38.764279Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1967,"timings":{"blocked":839,"dns":27,"connect":265,"send":0,"wait":284,"receive":2,"ssl":545},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-65655567.css","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-65655567.css HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-4f7\"\r\nexpires: Thu, 16 Apr 2026 01:46:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1271,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1270)","md5":"da8b1b4129ee93caa4c67967003e3dfe","sha1":"e6eb163d915d4c951e8cc548e02b32736e94fe72","sha256":"65655567bc3c9987d6cef2b187bed2ef7e292a41fff6bdf430abc870b852ba8d","sha512":"b7cdf8b2ebac53da9117818f4755964ad6133d5cd1b3d9a0304c998759300d571a95336ce5fdaac152dc59c04cc6b6a602e36cee17a8a5da88201d5f930f4b7a","ssdeep":"","tlshash":"d32123a0b432203cf427d47d1bf0468c9134e441db9f8f59fa0322628afb7431c256c8","first_seen":"2025-08-31T12:50:27.915828Z","last_seen":"2026-04-15T13:47:38.761143Z","times_seen":3,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-85cf5079.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-85cf5079.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-b31\"\r\nexpires: Thu, 16 Apr 2026 01:46:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2865,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2864)","md5":"181435777d76f6b030fe4a877dd07c0e","sha1":"5008f8d7d0ae392b6b6525b4ae159b119e95acc5","sha256":"6450bb55221d212074f0f4c330afbe2126463a2fae452e176b8135e1bf1e4507","sha512":"091bd1f97fec666446132af7413118d3b92d30b108a443a6fec0d2923c70275799c8b1b90c1f80e2a5314c3848f925d59a0fda96cec0f49979858bbdd4f2c089","ssdeep":"","tlshash":"35510a687c1bce326ab14844b39140116f1e67be62015dc931b04c6cdb77e58cf5a3d0","first_seen":"2026-04-15T13:47:14.780764Z","last_seen":"2026-04-15T13:47:38.781388Z","times_seen":2,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-85cf5079.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-85cf5079.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-b31\"\r\nexpires: Thu, 16 Apr 2026 01:46:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2865,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2864)","md5":"181435777d76f6b030fe4a877dd07c0e","sha1":"5008f8d7d0ae392b6b6525b4ae159b119e95acc5","sha256":"6450bb55221d212074f0f4c330afbe2126463a2fae452e176b8135e1bf1e4507","sha512":"091bd1f97fec666446132af7413118d3b92d30b108a443a6fec0d2923c70275799c8b1b90c1f80e2a5314c3848f925d59a0fda96cec0f49979858bbdd4f2c089","ssdeep":"","tlshash":"35510a687c1bce326ab14844b39140116f1e67be62015dc931b04c6cdb77e58cf5a3d0","first_seen":"2026-04-15T13:47:14.780764Z","last_seen":"2026-04-15T13:47:38.781388Z","times_seen":2,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.exxnsx.top/ws/6f15de46-97e6-4353-894a-79617d53c7c3","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"GET /ws/6f15de46-97e6-4353-894a-79617d53c7c3 HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://exxnsx.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 2UM96rgCxHS8lMrL9aj5rQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 13:46:46 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://exxnsx.top\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: but3h+vJFBM2tpYNcMncEm2VjYo=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":2336,"timings":{"blocked":0,"dns":782,"connect":1035,"send":0,"wait":257,"receive":0,"ssl":1033},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/home-active-6ba8a024.svg","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/home-active-6ba8a024.svg HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 309\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\netag: \"6909c120-135\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":309,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"deb5142f3196f88a25b9f62c8033713c","sha1":"067727cf92c11a25568a03382327f648ae5e8509","sha256":"6ba8a0241ae32ca18631caf3475037a3fd5b3131f1db4e45f50ea172b371576b","sha512":"6decd63c0d736d69bedb06f90473497bc83996b3a772f73fe587fdd00023300c4668e6a825c3ae0ebcf0505bd36cc6e0e3fb5ffdf1a710835048e7cbe68384ac","ssdeep":"","tlshash":"d9e07d96c78d1e1cf4270250b6fcb328111912a3124c850dc83011f1510120ddd7f598","first_seen":"2025-08-31T12:50:28.012378Z","last_seen":"2026-04-15T13:47:38.763518Z","times_seen":3,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/getCoinList","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shege.oss-cn-hongkong.aliyuncs.com/coin/litecoin.png?2.0.1762246942815","fqdn":"shege.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coin/litecoin.png?2.0.1762246942815 HTTP/1.1\r\nHost: shege.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 15 Apr 2026 13:46:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 69DF96CBCE63A838372B1D42\r\nAccept-Ranges: bytes\r\nETag: \"B0A5758F8205EC343A0C4E2D59E2E796-1\"\r\nLast-Modified: Fri, 13 Jun 2025 16:14:38 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-04-21T18:24:07.135518Z","times_seen":428,"resource_available":false,"data":null}},"time_used":1617,"timings":{"blocked":793,"dns":0,"connect":0,"send":0,"wait":275,"receive":17,"ssl":532},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/index-93daf2f4.js","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:48.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/index-93daf2f4.js HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-1233\"\r\nexpires: Thu, 16 Apr 2026 01:46:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4659,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4652)","md5":"2666bbe57c9eb88a259d876a0cbffcd9","sha1":"b396178a6b58dc0d95b710dc3083e9322bdf0b2f","sha256":"aa0e5d0c02b2eef1db8c53f63060568724bd0d8e117f47a722a0f6c36ed873eb","sha512":"a85da29c40c9f1fe93e3543a9652372382f82e2d97b2b9fd52c78b512545c63fb1f5137acf58da87ff561ce91594668edc027650b0140919cfc466b72c4099a4","ssdeep":"96:DUZX3wYUrblYZ/fqCwGiuUdZP2RbPCwGn1rbVeHwR9W3hrCAs333AE0Drjx:DUZX3wYQYhqCwGC2R+wSzdvehrCt33Af","tlshash":"85a1b88db802c5799bbb648094981421319c7fe5b13944e6f3febc4a77b5eb9e381320","first_seen":"2026-04-15T13:47:14.76491Z","last_seen":"2026-04-15T13:47:38.768095Z","times_seen":2,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/financial-906b9332.svg","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:49.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/financial-906b9332.svg HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 315\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\netag: \"6909c120-13b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":315,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8b827add4cf103df1bba6105c3dd9a2","sha1":"8cfbe03d9969073e9bcafd072f1b16b57311cd90","sha256":"906b9332f85809c05af75beb9e9007175f85e08ea53020206eed55374be0f2cb","sha512":"ec3811286fce7eed707c122e18a65a9019a3b62aedb1dc828205f8146921711e0b6763fbf2413be1968477ef07c79ae084dbeb91da74cb2dfa1e5695c54a158e","ssdeep":"","tlshash":"6ee0720c878c7e2cab21070cd72c7270232a82626b0c000cf86a217b969804dfc7b9ac","first_seen":"2025-08-31T12:50:27.957636Z","last_seen":"2026-04-15T13:47:38.776716Z","times_seen":3,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shege.oss-cn-hongkong.aliyuncs.com/coin/solana.png?2.0.1762246942815","fqdn":"shege.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.188","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:50.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /coin/solana.png?2.0.1762246942815 HTTP/1.1\r\nHost: shege.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 15 Apr 2026 13:46:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nConnection: keep-alive\r\nx-oss-request-id: 69DF96CB68F5793039803B2D\r\nAccept-Ranges: bytes\r\nETag: \"66097E4D53F2C9A9E6190485EE9F205E-1\"\r\nLast-Modified: Fri, 13 Jun 2025 16:14:39 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 10769821075161595358\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-04-21T18:24:07.142065Z","times_seen":471,"resource_available":false,"data":null}},"time_used":1733,"timings":{"blocked":854,"dns":0,"connect":0,"send":0,"wait":295,"receive":11,"ssl":573},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/assets/vendor-4b39a398.css","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:42.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /assets/vendor-4b39a398.css HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Nov 2025 09:02:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909c120-16c35\"\r\nexpires: Thu, 16 Apr 2026 01:46:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93237,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2491919d901ad15e82d6c1245fb28968","sha1":"166501022e953ff7bf709e96198c76d4578676de","sha256":"4b39a398237e9aaae03327bd9216047be19b6587a469195ed9160b96c9b5a819","sha512":"c538de42b89cda2c728d4b43d017565e1ac244b948c4dedf116cff1b0d085f16948fbb5d42b798ab020ac7dc3fd8ac2e56ecd365b07edac5e1d25d08edcb73b9","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"bb93d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-03T16:32:00.309427Z","last_seen":"2026-04-21T18:24:07.136506Z","times_seen":167,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxnsx.top/platform/dev/logo_144.png?2.0.1762246942815","fqdn":"exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.exxnsx.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:45 GMT","end":"Mon, 08 Jun 2026 13:31:44 GMT"},"fingerprint":{"sha1":"94:40:81:A4:A5:7E:68:F3:51:81:D9:1A:0F:C6:84:A5:AD:CB:6D:B7","sha256":"31:FC:FF:FD:F0:D4:61:14:CB:C6:14:1B:A6:8C:31:D6:19:B6:C6:29:AD:F1:CE:BC:1A:6C:4B:F3:2E:06:2A:CB"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1762246942815 HTTP/1.1\r\nHost: exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Jun 2025 14:17:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683db25e-2428b\"\r\nexpires: Fri, 15 May 2026 13:46:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148107,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 900, 8-bit/color RGBA, non-interlaced","md5":"f94564695dc35811a228bb54286a3656","sha1":"3f37ff584c415cd092d65123e79369bc5e09d741","sha256":"a302770b65caa6da7bc2dad6a83a44d313b9eeb24232e4504d7f75c9ce50f13a","sha512":"052c305397766313fb310c91082d8a27c7e5e525f4cd34b98a792a91936e3604eea57d79b3b973ed041756a6c7cdb08d57ed9113109042902d1e699f248c7d47","ssdeep":"3072:8gRF4QDpnUaJ/pShd/e6WN58JHmeKFFl/hcEaKJ9gi8:80yQDpBBN2bAwEa+gi8","tlshash":"ffe3f1a0a075f0e6dc97357a8c34bf66b46b200566d83b0ae748c2fd5db0d060e69fd6","first_seen":"2025-08-31T12:50:27.991123Z","last_seen":"2026-04-15T13:47:38.77339Z","times_seen":3,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.exxnsx.top/api/common/type/defi_activity_type","fqdn":"webapi.exxnsx.top","domain":"exxnsx.top","tld":"top"},"ip":{"addr":"143.92.60.42","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxnsx.top/","date":"2026-04-15T13:46:44.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.exxnsx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 13:31:18 GMT","end":"Mon, 08 Jun 2026 13:31:17 GMT"},"fingerprint":{"sha1":"22:73:A8:C8:88:26:BD:B4:EA:C4:A3:6E:C2:1B:40:11:3D:E8:D4:3F","sha256":"F6:8C:84:3E:BD:8D:DE:8D:16:19:3E:21:4C:B3:1D:CA:6C:73:54:E0:56:1B:75:8D:36:3D:CE:4C:33:73:C9:D4"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.exxnsx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxnsx.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 Apr 2026 13:46:45 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxnsx.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T06:09:25.408238Z","times_seen":14048167,"resource_available":true,"data":null}},"time_used":1313,"timings":{"blocked":533,"dns":22,"connect":249,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"webapi.exxnsx.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}