{"report_id":"4def2389-57e9-4075-82d3-61031107668b","version":6,"status":"done","tags":[],"date":"2026-04-22T13:13:27Z","url":{"schema":"http","addr":"okxweb3extension.com","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"okxweb3extension.com/","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"title":"OKX Wallet: One Crypto Wallet To Web3, DeFi \u0026 Multi-Chains","dom":{"size":1230,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"fe84f83319336be0b4f76462c067b20d","sha1":"4f50948daf0e5622ac4be0231fc68661a6f81028","sha256":"f618b7469dd81a43f8024d71d07f020c133066aee463a54f56c752854e63f461","sha512":"ad4fc40dbc3b32e5c0ef9c5fedd7d3a046e74e7f3280301e412abf5616bc66d27733c11e18809260e71198d48b3bc0915a087181c26dcb35c8ddf84814eef777","ssdeep":"","tlshash":"9821353ec2c1520ae0270164fb91f7982659821291670f713a5eb1b6f6cc0f752936c8","dom_hash":"domhash0ebe819308d222fdd2d1e3c37e196749","first_seen":"2025-01-29T13:43:32.361149Z","last_seen":"2026-08-08T06:04:56.726052Z","times_seen":10452,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"okxweb3extension.com","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T13:13:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"okxweb3extension.com","ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":18,"received_data":2652059,"sent_data":8348,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"static.coinall.ltd","ip":{"addr":"47.246.48.184","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-03-11","domain_rank":599909,"first_seen":"2020-09-04T21:29:28Z","last_seen":"2026-04-19T23:41:27.982145Z","alert_count":0,"request_count":1,"received_data":25403,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"okxweb3extension.com/ui.css","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /ui.css HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 13:13:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 Mar 2026 13:35:21 GMT\r\netag: \"27fa06-69bff019-11611271212ed3fc;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 439974\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2619910,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c3a00f07a5c0d92124681013ab092012","sha1":"265706a158a561dddf83e922086cf85c063e2673","sha256":"fe7a7cbf4d36764235c5f5afb88c1221597f8dfffcf6e1b929a9d91086dd16dd","sha512":"2107a63d24c5ee447fe1b3f1d446c8fa5ab5ab5f2569f58761dde6a7ce2fb69caf07e6a53081a97405eb75b45893e858abd0e7c5f4d1e5174912f95b887d1d9d","ssdeep":"12288:qkKYHl401U6w838BE4tOL6pN/4a47GGxY9Oy:q/qVFKEqyCN/4KGxYZ","tlshash":"4d25c410e010a2763a7b4b7e63da96c3f31414739d8136b6f9c442cacfe89751e89a5f","first_seen":"2026-01-24T20:44:59.548052Z","last_seen":"2026-05-30T02:32:49.916778Z","times_seen":5,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.coinall.ltd/cdn/assets/imgs/2412/9FB355F4AEDE1AA0.png","fqdn":"static.coinall.ltd","domain":"coinall.ltd","tld":"ltd"},"ip":{"addr":"47.246.48.184","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinall.ltd","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 06 May 2025 00:00:00 GMT","end":"Wed, 06 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:9E:91:92:60:60:A1:A1:0C:D4:D5:ED:08:93:20:91:A5:46:BF:14","sha256":"65:FA:46:DB:CC:5F:07:75:DF:7D:92:2C:3B:49:19:11:58:18:66:7B:B1:99:95:5D:4A:9F:F0:D8:F8:AC:6A:5F"}}},"request":{"raw":"GET /cdn/assets/imgs/2412/9FB355F4AEDE1AA0.png HTTP/1.1\r\nHost: static.coinall.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/png\r\ncontent-length: 24479\r\nx-oss-server-side-encryption: AES256\r\nx-oss-cdn-auth: success\r\ndate: Wed, 22 Apr 2026 13:04:21 GMT\r\nx-oss-request-id: 69E8C75592AF9437374B4642\r\nx-oss-storage-class: Standard\r\nx-oss-object-type: Normal\r\naccept-ranges: bytes\r\ncontent-md5: vJkRCBDiIfWiKQQe8tj/sA==\r\nx-oss-server-time: 6\r\nvia: ens-cache37.l2de4[0,0,304-0,H], ens-cache17.l2de4[1,0], ens-cache5.nl3[0,0,200-0,H], ens-cache11.nl3[1,0]\r\netag: \"BC99110810E221F5A229041EF2D8FFB0\"\r\nlast-modified: Tue, 24 Dec 2024 07:23:12 GMT\r\nx-oss-hash-crc64ecma: 13957921891658376088\r\nage: 525\r\nali-swift-global-savetime: 1776863061\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Wed, 22 Apr 2026 13:07:20 GMT\r\nx-swift-cachetime: 3600\r\ncache-control: public,max-age=31536000\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff6309f17768635862814199e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":24479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 480, 8-bit colormap, non-interlaced","md5":"bc99110810e221f5a229041ef2d8ffb0","sha1":"9180a4fdadddc11ea129ac8403ac017cead0b05b","sha256":"d3d37512dccce8e5c815d55b88124f4ffffa5762ff6aaccd9f13ada7a331f905","sha512":"1c24424c6faac53f2d82e2aadc3f536542bc0e6c31512828aee042c64a60279b5b8f1e53eb633c0cc1be9b503b86647d0ea382f197a5867625b8321a0c91260e","ssdeep":"384:EIAb13u5sUTiC0ApUTbESAssctwPgevQWasKiC/unJvPOD0Cq8Zr9SAz1yvD:EIuur0IUTAZbciPHpaeCsvP6I21+D","tlshash":"58b2e052a8248ebfc2f56f7d1ec9494187e942f40720e571dcd04eb6767be02e0978a9","first_seen":"2026-01-24T20:44:59.549381Z","last_seen":"2026-05-30T02:38:39.986699Z","times_seen":15,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":256,"dns":108,"connect":26,"send":0,"wait":28,"receive":31,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/scripts/ui/ui.js","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /scripts/ui/ui.js HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:24:33.301952Z","times_seen":17774380,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/static/images/onboard/cover-light.mp4","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /static/images/onboard/cover-light.mp4 HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T06:13:35.461208Z","times_seen":146504,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/favicon.ico","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 13:13:06 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 22 Mar 2026 13:35:21 GMT\r\netag: \"99e-69bff019-89332fae22b16965;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 226\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 24x24, 32 bits/pixel","md5":"d03d9946f58df99752b35363e1f41446","sha1":"12b4e8e322259f374c754b5317a57489d348ed3d","sha256":"f905e041dbad2c35e435d3fed28304d7e6887d87011a3b7e64c6aa58517a3c29","sha512":"79b0efc65f78c36365f64017b1768d91abae4858932eea798227d4930150a4b3ebd9cffa068574ecf31f0c419bb30075dbe2ba682703109b8b9a5cc3d4f02dce","ssdeep":"","tlshash":"925122390a56754bf97a5131eaf6d9309810adec231d4520befc3eebbff09201d0a529","first_seen":"2025-08-07T13:54:38.361327Z","last_seen":"2026-08-06T09:28:04.213203Z","times_seen":402,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/scripts/lib/collect-pure-v5.2.9.js","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /scripts/lib/collect-pure-v5.2.9.js HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T06:13:35.461208Z","times_seen":146504,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/scripts/lib/amplitude-analytics-browser-2.11.8.js","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /scripts/lib/amplitude-analytics-browser-2.11.8.js HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T06:13:35.461208Z","times_seen":146504,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/scripts/lib/globalthis.js","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /scripts/lib/globalthis.js HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T06:13:35.461208Z","times_seen":146504,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/43DEFFE88CCA0D7C.png","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /43DEFFE88CCA0D7C.png HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 13:13:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Mar 2026 13:35:21 GMT\r\netag: \"1b5-69bff019-bba7fd436555fd5b;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 437\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"322aaa1055fb572ece73caa6816a9bc6","sha1":"2efc2b280588e19116ac89f2d91733870b28e73e","sha256":"e3ef3ce95edcdb45222cee38d0808d2ec0af59d8d51ef2401a211975e8ee8dd3","sha512":"64b15825e7a9d2f12a5003618313286fc4e9206f2179d68672bccbd8d0d12441431a6baf8df51e91794e4e28a64cc403318ac13a6a10d678609ba359b1da4c49","ssdeep":"","tlshash":"6fe05542a3220c69db1297b49224c14457a03a3b0d5ab27a132e9a0a4ab461cb3d5611","first_seen":"2025-04-16T07:28:49.684737Z","last_seen":"2026-07-14T12:54:28.608715Z","times_seen":58,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T13:13:05.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 22 Mar 2026 13:35:21 GMT\r\netag: \"1e2a-69bff019-43a8827e39f11652;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1898\r\ndate: Wed, 22 Apr 2026 13:13:05 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7722,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"439776caa53d3ef135bcce0639ba31ab","sha1":"dfc874790782a7ecdd95f1b84a81fcf0c664ac91","sha256":"507b2d02b97d2057aed23c75a15eba1e71314d9c037fe1be21336e1c5d531127","sha512":"2636f0d7be17eb32a6600dbc19d965aba3e40412c6d1594cde71c4f86b0031cce96746e101e7555095fe08a1d917a5152f2928e9e39437c12eb7f83fabbc4c9e","ssdeep":"192:1jjyaI052UZWdtIfE6yeCDvLRFC9h5edW3yEylfz:1jc0LZWuLCDHC9hMdW3yEylfz","tlshash":"1cf166634af6880a565383998ee2f9aa4f50d507c305dca4b2ed42dd1fc2fd6cca325d","first_seen":"2026-04-22T13:13:32.341347Z","last_seen":"2026-04-22T13:37:31.20613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":265,"dns":80,"connect":63,"send":0,"wait":72,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/scripts/vendor/ReactDOM.js","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /scripts/vendor/ReactDOM.js HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T06:13:35.461208Z","times_seen":146504,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/scripts/vendor/ReactJSX.js","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /scripts/vendor/ReactJSX.js HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T06:13:35.461208Z","times_seen":146504,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/4C0F53E9427468A2.svg","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:05.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /4C0F53E9427468A2.svg HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T06:13:35.461208Z","times_seen":146504,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/FD6547F8FFE4CC6E.svg","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /FD6547F8FFE4CC6E.svg HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T06:13:35.461208Z","times_seen":146504,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/scripts/vendor/theme.js","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /scripts/vendor/theme.js HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T06:13:35.461208Z","times_seen":146504,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/scripts/vendor/React.js","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /scripts/vendor/React.js HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T06:13:35.461208Z","times_seen":146504,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/scripts/vendor/ReactRouterDOM.js","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /scripts/vendor/ReactRouterDOM.js HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T06:13:35.461208Z","times_seen":146504,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/sandbox.html","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /sandbox.html HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 22 Mar 2026 13:35:21 GMT\r\netag: \"4dd-69bff019-2287d0abb123de20;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 573\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1245,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"93b0652339101ee6c617cbee1887f824","sha1":"aeb2d2e57b42e1e13d3fb42b6e99ddf0290c482e","sha256":"fa62161ce5128cb2e9dfe69fb8acc304fcc2167a31bacd85f3f095c65e53df86","sha512":"9e582942d904c95022257b22f9fdf71b60d8d12e4bdb2a4012852f834e3a71821c18516e73716f747ed274d8350417f738457b28c3633ee38a371beafb76f9ba","ssdeep":"","tlshash":"5321353ec2c1520ae0271164fb91f798265d825291670f713a9eb1baf6cc0f752936c8","first_seen":"2024-05-06T17:44:00Z","last_seen":"2026-04-22T13:37:31.201685Z","times_seen":18,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okxweb3extension.com/ses_sestheme%3Dlight.html","fqdn":"okxweb3extension.com","domain":"okxweb3extension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://okxweb3extension.com/","date":"2026-04-22T13:13:06.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.okxweb3extension.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:07:07 GMT","end":"Sun, 21 Jun 2026 21:07:06 GMT"},"fingerprint":{"sha1":"40:AE:5E:7B:16:F5:B3:4F:CB:C1:8E:A1:6F:79:3F:80:BC:4D:79:37","sha256":"9C:BF:58:E1:FE:4B:FE:82:14:43:EE:39:07:E3:FB:D6:DB:D2:EE:5C:88:C2:66:D2:3D:F8:FB:88:D0:62:04:37"}}},"request":{"raw":"GET /ses_sestheme%3Dlight.html HTTP/1.1\r\nHost: okxweb3extension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okxweb3extension.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 22 Mar 2026 13:35:21 GMT\r\netag: \"4dd-69bff019-f588085dc09d500d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 573\r\ndate: Wed, 22 Apr 2026 13:13:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1245,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"93b0652339101ee6c617cbee1887f824","sha1":"aeb2d2e57b42e1e13d3fb42b6e99ddf0290c482e","sha256":"fa62161ce5128cb2e9dfe69fb8acc304fcc2167a31bacd85f3f095c65e53df86","sha512":"9e582942d904c95022257b22f9fdf71b60d8d12e4bdb2a4012852f834e3a71821c18516e73716f747ed274d8350417f738457b28c3633ee38a371beafb76f9ba","ssdeep":"","tlshash":"5321353ec2c1520ae0271164fb91f798265d825291670f713a9eb1baf6cc0f752936c8","first_seen":"2024-05-06T17:44:00Z","last_seen":"2026-04-22T13:37:31.201685Z","times_seen":18,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"okxweb3extension.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}