{"report_id":"524b565b-8803-4f16-81cd-10398840d7b6","version":0,"status":"done","tags":[],"date":"2026-07-23T14:12:05Z","url":{"schema":"http","addr":"crypto-aaaa.com","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"title":"Crypto-AA","dom":{"size":110385,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3636)","md5":"2548dfc4d8a4c9ed93e9bf263bd88349","sha1":"b565d23c6b1e94155b26583c8cde49dd9fdb62fa","sha256":"b0508edb584d249340d06092dbfdbf91bb854191d786f84c947b732497631a91","sha512":"93e7cedcbda287e63ef08995904a7bcd840916879df0ef4ba05b826abb2f9b06dcfeeb4a7bf6d6e9729d844bb30c49bfd5dac3b175bfa29421fc087c2e603f6a","ssdeep":"1536:JSd4Jr4cRu7aYjA+E8gldP05QwhVH+qByhtZUvnTuk1ZfcGBM:A4aKuaklh55nTDbcG+","tlshash":"5eb32a60e3ac093f209350cba7a592ca75bb5473e627c5193bbe46546fc6c08e5336ec","dom_hash":"domhash2ef62db40b823fa0ca6b22cdecd1e94f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"crypto-aaaa.com","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T14:12:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":6147,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.staticfile.org","ip":{"addr":"202.181.25.28","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2013-03-29","domain_rank":851278,"first_seen":"2013-08-23T08:51:19Z","last_seen":"2026-07-20T17:37:32.17397Z","alert_count":2,"request_count":2,"received_data":178548,"sent_data":951,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-19T23:00:06.681739Z","alert_count":0,"request_count":3,"received_data":330340,"sent_data":1678,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"crypto-aaaa.com","ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2024-12-02","domain_rank":0,"first_seen":"2024-12-24T17:34:51.371721Z","last_seen":"2024-12-24T17:34:51.371721Z","alert_count":282,"request_count":94,"received_data":2411220,"sent_data":56582,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"32fa489a967c18f274714d60d0b1006d","sha1":"52bf7d2c6d63fa8ba73aaa283f46e0887194737d","sha256":"fe712f93c206eb740e83e74a924c56cc68bf50908c07fd10e094dac184bc8861","sha512":"aada229ad825ce62e8283ae469487bd48d8296b850acd04af33726c9beb8816a9ee34d33ab7c5e856b844b2b940c9eaadcb02d12d2c163afe2dc245b0b8dcfb6","ssdeep":"","tlshash":"c6310080c0000c208080003c2c80800020208200c2008000080282802ab80028000808","size":1693,"data":"","first_seen":"2024-08-19T16:31:39.827611Z","last_seen":"2026-07-23T14:12:10.623522Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"a96a9fc6ee9345d8491900bef34d1fd9","sha1":"e55774ef8e77d125efb96d3b9004d0acd918612b","sha256":"cd3d858a1722bbb16be3075ebd5c3c683b896d887328b3370718d0e6d283f6d0","sha512":"76c24201b27f408cb06c16d6812a33feca786e5a87a9096b31554dcd5b230a2a57dfa7fe5a0f6e378852ef00392fbfdec88cce111601917a63525a4597411759","ssdeep":"","tlshash":"d7310080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1671,"data":"","first_seen":"2024-08-19T16:31:39.83505Z","last_seen":"2026-07-23T14:12:10.625313Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"95a91054664b85ec3dc26794a5c88fbc","sha1":"62678cdf31fdd7214d9f7b86d9123535ef28d6d6","sha256":"0d44cecff0be3f20161c612d5de5ad051d4b113e9f91bd31d7f65bb401e30d04","sha512":"4e86debf1073599a6c4b9583498a3d9b77f8eb816394083378589ea2c8be09f7b384c0a02d3def110d931a8bb9cae86400bbdfbb731dae0675fb1245e989d2d2","ssdeep":"","tlshash":"9c3100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1673,"data":"","first_seen":"2024-08-19T16:31:39.831415Z","last_seen":"2026-07-23T14:12:10.626834Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"3a03c6db92366492c9931cd895fb8e3d","sha1":"16835c12e9688feac8a7ef7ab2da7d131878b159","sha256":"03c1d68bb3e42e8ce0e8aad17f25188b476c420a83657ead1fb4b20bb90398b8","sha512":"5c73e41b4c9eb98198e47d54d3fa61804f1eee707dd6ca66a4e785f8ef67a78d77d53524c0fd848b6e63158c740ea942397202e33cbd3482576c10edea38fdc2","ssdeep":"","tlshash":"7d310088e0020820808000380c82000020200000c88080208802808000080028828808","size":1696,"data":"","first_seen":"2024-08-19T16:31:39.828299Z","last_seen":"2026-07-23T14:12:10.628696Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"31a55ec22e75e4139ca5ba1fdda855d9","sha1":"7997f35a6707692bac1b64e10ed9838a9a16ce0e","sha256":"c75f263e11af2283c084cfb6d525357032edbbbaf49beafa63d3f35788742096","sha512":"135aaf87b131a5b96bbac259c70b8eddfb5c2f82e672a74f2023208832f6211782705ad4c8cf9148073e6606ca5ff5ebf3a031449c573cd5b59a00ff97c1fffd","ssdeep":"","tlshash":"983100c0c0003c00c0c000fc0cc00000f0300000c0c0c0300c03c0c0c00c003c03cc0c","size":1681,"data":"","first_seen":"2024-08-19T16:31:39.842009Z","last_seen":"2026-07-23T14:12:10.631391Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"3d665b788ed0fc992e4398485d3e0ece","sha1":"de09f97c53653203c6a26fa8bf250cf93906644d","sha256":"61b49de4f90ced9f1513ea211ef090a39e6e93ba210837249dfc93f7767a7440","sha512":"b448bb262ff8c25093898a38c3cdeaa28d5e0a68bfcccffd850a68e4b5c626e44f33fc7458ef5530b7a64fdc912007f4353fa2b1aa1c1f550a4c14203a2c2154","ssdeep":"","tlshash":"a53100c0c0003c00c0c3003c0cf00000f0300000c030c0000c0cc0cc00ccc33c000c0c","size":1691,"data":"","first_seen":"2024-08-19T16:31:39.843679Z","last_seen":"2026-07-23T14:12:10.633047Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"039126f32c9d5148463acce2a996b2e6","sha1":"e2a22fcd91f9ae813e39f3680ead73106f4dde23","sha256":"fee22e6153a2231fabe212d498735208dee9ebb51445b930a9609f074538b873","sha512":"d0f4b5d512d54f9681426294726592ec8161dea8c9f25f7fa382e929d46792f3f0b5099915f832ab9481defe076195fbc4018da2cac75dbe025318aea9bc7485","ssdeep":"","tlshash":"b3310080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1678,"data":"","first_seen":"2024-08-19T16:31:39.829847Z","last_seen":"2026-07-23T14:12:10.634352Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"820800315691b0805dbb8474b35288ef","sha1":"31c6b2c936cbdd758c68349e849decd67c9840f8","sha256":"beb7d360e82a2acf3d8fb9242e6c1f248f226571b0ba78699be01ee1f04e6ae8","sha512":"0ba8fdea1e300379632d975cfe4c6934fafdfc4fa7090bb903fab95088c0e985be67da0a413c97f0e00c10c45ff83027e94cf7e139a41e49824b9348fe254def","ssdeep":"","tlshash":"d231bd1483b5b7b8c38930eeba57dc55023a0c19b6e5a7cc95079c40aa44436f614adb","size":1729,"data":"","first_seen":"2026-07-14T02:05:53.332899Z","last_seen":"2026-07-23T14:12:10.640751Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"f972c2f8f9957f3db9d0c6baff7493c0","sha1":"bc7b0065ab15f7a1595589c081ce32180f05ca1e","sha256":"ec30ef9b44ab0a17256ff87b984c0e609e1cce96552a665762840634c4801f38","sha512":"c03edd2b238c4620207d46c1adaed473bfdc666cf4b0f3eccd554bf5e05a5f3d8bd779278caf20a6cce15249b55eea27106b3fc9736c9bb635218382865d9b7f","ssdeep":"","tlshash":"21319d5483b5b778c38930eeba97dc55013a0c19b6f9e7cc990bdc40aa44436f615aeb","size":1729,"data":"","first_seen":"2026-07-14T02:05:53.33471Z","last_seen":"2026-07-23T14:12:10.643386Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"699ac231ebed63c1bbd99a6ed425625e","sha1":"d3e20685a03328ae5592c5ddc38b03120da27d7f","sha256":"7f47a05abb086c4fef6831941845519fb013d64f9adf8479918b51d7d0a060ca","sha512":"ca5e47ff45bcfa21ebaa296b74252e03ae63ad44951e61cde63cd427180b8ee407e5d4a5fbbdeae7d3a18f35cca5ced87f1834d2380d51eb76dd05800ac88fb0","ssdeep":"384:ubYpA2XqL6zn9N4hJdqywuyD6GE4qN0dhcJyhfPtspjmVkpv3cM1BvY6cka0nV+5:uH+USaByhntsoUvnbvNckIqjvZftm","tlshash":"a5e23192e73ca77716a6019f66de81eaf72680a9313bca2e355cc11817c5d3883377e4","size":31726,"data":"","first_seen":"2026-07-14T02:05:53.336679Z","last_seen":"2026-07-23T14:12:10.644818Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d662dcb00abd93a4913f85b96d1a3069","sha1":"0fe96174f00f73f9e7080d86f981e7735633a3e9","sha256":"149b86462b959f162781ce52f39edc9c6d20129c891c377cbf01d94d01aba8ae","sha512":"172b8c91cdfe9bb8a0469e70f6e34c2b6560f7d8f2b519bf9bca522bc9973ea65ac18d93a0734283dcdcddd223a0b594307336626d0432800d90d88796f5a9e3","ssdeep":"192:x+9wKCCBm9wKCC1u9wKCCXO9wKCC9u9wKCCssxI9wKCC7O9wKCCeQi9wKCCTo9we:x+vm7uVOrur+JOAQihoTuhK5Mh8N","tlshash":"6522b46cf993286c789334258f6f005438e87547cb49d4193eada8c26f8850da5bbfde","size":10272,"data":"","first_seen":"2026-06-09T08:24:23.856239Z","last_seen":"2026-07-23T14:12:10.646527Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"63d88699b2021e3bc834c282c07f0457","sha1":"b5d0f47bf16e89014db3b294aeb7ca8ce8c0d994","sha256":"ce67eac94427a771aa83be4c27fbf9f5552c7885038cf8ad19f4232e2fa40bbf","sha512":"4df4eb2577d70cbf1b1964e21bb678eab8a734105f52689fb93dd816e624b75aaefe448bfff0bca13eb022c60192b749ba64ca2858e31dc856f2f5cb42aa12ef","ssdeep":"","tlshash":"cc116b05a70b2cd828f3996f1f1384120c3524136887ca243f4d97e09fe9e939469d5d","size":1076,"data":"","first_seen":"2026-06-09T19:00:24.191423Z","last_seen":"2026-07-23T14:12:10.647369Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9e951ccadec7053c28ad5a64f31d481","sha1":"13328ffc309fc222bd1e5009d029c2b2e6d55819","sha256":"521b2f7c72caa8b0063909fa695494538293dc98ef65e03f282c3e482aaf86c4","sha512":"0eafd63d06bbd402c5ad10ea1e15765b143c5b42407a32908e33f5e194e52ca446afc2194d4b4df6d66fd1016c834c642e3eecad144015ce44b25464ab13ab55","ssdeep":"","tlshash":"a1f0c96e0a1ed7ff709802355326a2ee30cd4baa90076407fe87021716ac018bc01ea1","size":522,"data":"","first_seen":"2026-06-09T08:24:23.860945Z","last_seen":"2026-07-23T14:12:10.648179Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"0493b16288b05cf354a6089113f6870d","sha1":"59040bea326e362335dffdf80038b194a14ae72f","sha256":"f94367639ba92ac2b18938900ec24d60af1a9c53b0d1bb7d75a5f9d10bf88dfc","sha512":"b13812b7c2d3acd24deb5a82984cfe482f2af29945cd6cf3efeaa9426b58e67f1b977e75e8ae9c01f7093bd01dbfc66ce7f717a3d89a341fd52cca6fad897088","ssdeep":"","tlshash":"9f3146c4df2d01acdc4853e82aad82cc0a3c3a703c339c696c185e389c68dbe9519d79","size":1715,"data":"","first_seen":"2026-06-09T19:00:23.03553Z","last_seen":"2026-07-23T14:12:10.648986Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6ea560991137b38158471318fd2f4e3","sha1":"e58c73bc0d05faf2f0dca3cdaad32f5e0534ce2f","sha256":"52bb6f01e747b19d07389f8dec2abf3691d394082bafac7a5ceb5908d29290a8","sha512":"770853d9d1ba2297f2f6de3737454d84bab94806865fdf2e0562e7e10ed0f5c22ed3728ec9bf9981b638273661235daad3f02cc595af4821bf518bd89e3deafb","ssdeep":"","tlshash":"e4d05ec39b4d1058587b319784eb15cc005c426288920d89bc3d91908ca01ec5371f2d","size":250,"data":"","first_seen":"2026-07-23T14:12:10.650387Z","last_seen":"2026-07-23T14:12:10.650387Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"ab2efa9d153cce9b0cfac0ea0aa4f345","sha1":"a6e18d83a756a27a08718944e922f095488eba92","sha256":"f036ee43a53f238d654363dbe7083676a0578a9c7c7196b1b02a504ae705df94","sha512":"e7aaa8c19a92adfb9721c07d359b4dec8c9ea2f468bf9c40983d36695d086a34cbeae029884efec902d389567108369ecc4aacb107c245492f33b21a4d5c027f","ssdeep":"","tlshash":"4d3100c0c0000c00cccc003c0cc300003c3000c0c000c03c0c00c0f0000c003c030c0c","size":1698,"data":"","first_seen":"2026-07-23T14:12:10.651773Z","last_seen":"2026-07-23T14:12:10.651773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-07-23T14:12:10.613876Z","times_seen":14223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"1225e288decc7d270277ec137922b22a","sha1":"8d82db4c376187a24f8150afadcaa831855040d7","sha256":"b3b37b18af53856991f31e83dc63f6e25587bc997c7784b07f936b59ac8dc577","sha512":"2b85b9f0bcad8aac3b9a6820e309e605599f7e01027d2c236274fb2fe4254fd605b2571de3c3c3f42d1c44ff72ba6daa36561f7bcea6c2157b98acc483907260","ssdeep":"","tlshash":"593100e0c08e0c22808080380cb0000220208000c8c08000080080800008002800080c","size":1687,"data":"","first_seen":"2024-08-19T16:31:39.834097Z","last_seen":"2026-07-23T14:12:10.653152Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"54bd4cf19a28ae99014ec4f0ba62392d","sha1":"f021b4fbdd364eea8e049c296c54f96eefd932eb","sha256":"f5a74c63a5fef25586cef289f578bdbfd7cea2373b3ae66fb070ed4a7fb159fc","sha512":"65547b05d54e9deec2ae77bdc28ebcf9eac72e64302b26013820cf9d699893ee597a2896fade05bedf121b0b492116d9feffebfffcee635ef312c277e2485d02","ssdeep":"","tlshash":"4d310080c8000c00808000b82c82003020202020c00080000800808022080028a0080a","size":1679,"data":"","first_seen":"2024-08-19T16:31:39.842882Z","last_seen":"2026-07-23T14:12:10.654742Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-07-23T14:12:10.621998Z","times_seen":7925,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"ec048fd2c55f92e5e5f1c79cd6ad92ed","sha1":"2674d061ba14be865fecebf67fbb873d1ce6226d","sha256":"76e65865cd94db5635475ed39a68437e36b10dca59ac5ad7acba64f56a97969e","sha512":"a1297286ad094961c0f61ea9160c9b5c6c3a1e2f46bf5cfee867da683456f1a31ebc352bef066d22dfcd9118911c22c6e85baf5f64d58ad61fe111ad9166f2f9","ssdeep":"","tlshash":"573100a0c8020c00808000380c80208020208000c00c800028e0a0a008882028200808","size":1703,"data":"","first_seen":"2026-07-23T14:12:10.656203Z","last_seen":"2026-07-23T14:12:10.656203Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/js/layer/layer.js","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-07-23T14:33:06.533383Z","times_seen":14035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"eb069947e1cc81ac8ca2dacaa6ed839d","sha1":"9a2ce7ec6645c4ba0b7876ba8fe0302925f99965","sha256":"2cc474c8eb45a979531ff640b4948304685820ef28af309bbc3b7c41b509e29d","sha512":"39b27034ee2afabccba9b42dc40cbbda7b9553e47ef859fe22787ce99f51726ee970776a149976cd8fe2b084ed469aa2899f0351926fc8be25fd9137ff3d8f38","ssdeep":"","tlshash":"703100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1675,"data":"","first_seen":"2024-08-19T16:31:39.83057Z","last_seen":"2026-07-23T14:12:10.657465Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"451cdf8700e70d554dffa87eba3752cc","sha1":"d962d6f2028e76461f0d973efc24745ca98269e2","sha256":"44ac0c22c12062445f6942180f25ec9bef96636199515b399892407f8fa8cdcf","sha512":"9333e3dc5ce17e0102d0716bc20f4c13a587ce1f142219c699881c92e1815d44e0a7d9b3a53c90fcd4e9aa16f044e549d92d509fff2ff4ae26d0876654794b0d","ssdeep":"","tlshash":"d3310082c000082880a000380c82000020200000c00280200c0880e000280228002c08","size":1685,"data":"","first_seen":"2024-08-19T16:31:39.840681Z","last_seen":"2026-07-23T14:12:10.658804Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-07-23T14:12:10.606051Z","times_seen":6160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.28","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93100,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-23T14:12:10.574861Z","times_seen":21771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/2.1.1/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.28","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-07-23T16:37:50.387311Z","times_seen":10242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"error","filename":"https://crypto-aaaa.com/","line_number":1607,"column_number":29},{"level":"log","text":"error","filename":"https://crypto-aaaa.com/","line_number":1629,"column_number":29},{"level":"log","text":"error","filename":"https://crypto-aaaa.com/","line_number":1431,"column_number":29},{"level":"log","text":"error","filename":"https://crypto-aaaa.com/","line_number":1431,"column_number":29},{"level":"log","text":"error","filename":"https://crypto-aaaa.com/","line_number":1431,"column_number":29},{"level":"log","text":"error","filename":"https://crypto-aaaa.com/","line_number":1431,"column_number":29},{"level":"log","text":"error","filename":"https://crypto-aaaa.com/","line_number":1607,"column_number":29},{"level":"log","text":"error","filename":"https://crypto-aaaa.com/","line_number":1629,"column_number":29},{"level":"log","text":"error","filename":"https://crypto-aaaa.com/","line_number":1431,"column_number":29}]},"http":[{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_doge","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:34.075Z","timestamp":1784815894075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":541,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6f2e285f0cafb7fcb24fe42a3be1f073","sha1":"ac43e457e6b21fd154084272e9e59804853960e5","sha256":"417620204954c83f8ff784f50e608602271339a4baa5b2875bfd907bb06c874c","sha512":"9653a005dd6472ab0a52428f0d7dc92a59f65c2d94f97028382322543538453e5102b7ff248e2d7617b679c8fb180335081923231f4633028e2467ec39babfed","ssdeep":"","tlshash":"54d022d0bf3811310c71fbe154e8172ea8ce40878081522c5bfdcb78896c00c3312c1a","first_seen":"2026-07-23T14:12:10.499042Z","last_seen":"2026-07-23T14:12:10.499042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1722,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eth","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:37.075Z","timestamp":1784815897075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204,"size_decoded":539,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"400d789aaab10b6ed8756b522f3e989a","sha1":"e88839458f066da407965db0520aa5229fc3dbf7","sha256":"42fb3d727d2ee6d4694faf7237f2456a464910c82e8a974d12452711572525e7","sha512":"027fd223358f5e145cc020fdd7a125694be796c899deb0649b9d3265ec23edbbd8ad50675992826b8fd711f9b7af447003a8660ca91e12024f697dd9e1679a1f","ssdeep":"","tlshash":"34d0a7c02e3404151871e3d1a4d8172d144d408580c242051abe87781498508722292a","first_seen":"2026-07-23T14:12:10.501705Z","last_seen":"2026-07-23T14:12:10.501705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1593,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_bch","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:52.105Z","timestamp":1784815912105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_bch HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=bch"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202,"size_decoded":537,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"88004e049217a29a97bfaacded1123f1","sha1":"6f3f0281cbef43a3072c47c1e993528a26e733fa","sha256":"34b8e2d7e53841717a07d048d68cee829991e14ec8528102d3383dd41eb97133","sha512":"fc0a302c2e6f9f8633df78f503fe0c37e17b3bc68d025aebe9283c0156bc7e8648beb51db39c9f66a42b0e71588b069ddaaf3f1648b2d9ceb1faa2483b54a7d4","ssdeep":"","tlshash":"9cd023e07f344c250831d3d174d40b1f548f1443e08445455afecb35105c21c3313c1b","first_seen":"2026-07-23T14:12:10.504864Z","last_seen":"2026-07-23T14:12:10.504864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Upload/public/62c127d45d1d5.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.964Z","timestamp":1784815890964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Upload/public/62c127d45d1d5.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-7894\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30868,"size_decoded":17145,"mime_type":"image/png","magic":"PNG image data, 489 x 510, 8-bit/color RGBA, non-interlaced","md5":"3e8790350019ee69e60ef8eb75d61a55","sha1":"b5941b7a1e0f1ceb7f947a1d7455e9229f255b91","sha256":"b678da892808f8f4a1a1b05fff07ab0d474c3617d8458033a8aa2746bb56de10","sha512":"3231abab29b1fc9981370d17f3c189fd00d86ea1b06c92f63ab354e20733f549d789ee8b441778d030aae1a88a315bffd3e5747f201f3e3eb1fbcd202eb35665","ssdeep":"384:eJXE051QtVe5JEbssbLY2kajNeFeZFNpOtWGJ0Uqi1q+lpQIsx:e351QtV+Issb02kaAeFNp5UqiIcm","tlshash":"3ad2cf4578b0f2beb052e631adc4184a1a3b2307cac02d1971de4c7fdf12baa1c5f5a9","first_seen":"2024-04-28T05:39:49Z","last_seen":"2026-07-23T14:12:10.508271Z","times_seen":167,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/xm/1613786496962262.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.972Z","timestamp":1784815890972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /xm/1613786496962262.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-a83\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2691,"size_decoded":2999,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-07-23T14:16:11.972509Z","times_seen":22575,"resource_available":false,"data":null}},"time_used":2216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/xm/5f8738fd439bc57.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.975Z","timestamp":1784815890975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /xm/5f8738fd439bc57.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-9a9\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2473,"size_decoded":2676,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"430e14fa7ab62df82c9858bfa2682ece","sha1":"aa845a9abbffcbceee99934123b8e4e94b9ee52d","sha256":"20aa97f93b13e2de6de053d1d96a51ef8746a758973515f93b3f6e905c98f716","sha512":"bebb827e0a4525c0f7d3213a28fbde13be283e82d41ff86cfb216c98cdd5fa6515cd3403e2b0b2237635f46b0703c22359e797ca5bb0d3f660c4a1a287d600f5","ssdeep":"","tlshash":"f5511bd8fcdd3065d094b87b6b2121a25a831bc4f2807ae6f426c4495233c69076cfed","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-07-23T14:12:10.512974Z","times_seen":5001,"resource_available":false,"data":null}},"time_used":2214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/xm/5fc.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.977Z","timestamp":1784815890977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /xm/5fc.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-a86\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2694,"size_decoded":3021,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ad5509616a5fca9f389801052bea3fe","sha1":"5b53d204b7e6066409067fba9fce5202ff20e9d6","sha256":"6becc3abea448b67731610708852a70c3ceb99059b2dee98da3711dc0620218a","sha512":"18729e5d7521224c032a2a7f18c154b1d02905dda6a06dc3a1af5d876bc5f651b78699589772cd6158bc1bfa75aead83b084bca2b06539a3e4cc9b4a6d476ded","ssdeep":"","tlshash":"ed512be6a252222ac78335be8a25f1dbdf560afb123220858088c13aa40f750c98a573","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.515798Z","times_seen":19349,"resource_available":false,"data":null}},"time_used":2212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/android_down.d99dd6cc.svg","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:31.680Z","timestamp":1784815891680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/android_down.d99dd6cc.svg HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-2d6a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11626,"size_decoded":4620,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d99dd6cc9eeb67a17b5f64eee801202c","sha1":"6e11cb75b0529af92236763785b69749f62fee4d","sha256":"dc8a78d121b34f655fc063f43d4ef8cec3581d8539369f35f2ae0258a5735954","sha512":"fea5046497f492375a2bde60559ebfb91f67e52685d5b8055c2fd585809cfc98c3bf1a2bb0b20aa00e390c75533ba327d1b66194709fffe3c236fea363c0aed1","ssdeep":"192:Wt1zfau5v7dYMyr8R0tjFnR0tmWi2C/FNNW6xX8jVCZVzLQTsMH6IL:MzfhzS8+pn+mW4FNNFXZZJvw6IL","tlshash":"693255e793a4c0d0690fd5b5cd3b5ae43e1b70fbafc19058326dd944eb429d68b06e48","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.516705Z","times_seen":4144,"resource_available":false,"data":null}},"time_used":1509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_iota","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:34.083Z","timestamp":1784815894083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_iota HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=iota"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203,"size_decoded":537,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"554b79bbc1718014742075178fc7a606","sha1":"f5bf364b50b9eeac266757f10ef7861f8d223e33","sha256":"b5bd60632ad34a1c02c169d98996bfaf2b7892e402fb73c3ddbf42be12ecf927","sha512":"d14a4b35f21af026ade67086d3e5d2737394c97814f6178dfb0456ed8c9710d3d516d34284bdbf7fbd4e94928b3f7c8574d3f1d8085f28ce04b38e8dfe0e64f1","ssdeep":"","tlshash":"2cd0a9912e7c411608b1a7e158d8175f60cb9882808152096bfeaa7820682183a32826","first_seen":"2026-07-23T14:12:10.517654Z","last_seen":"2026-07-23T14:12:10.517654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:36.076Z","timestamp":1784815896076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8d86f02851271875e0f490763946d949","sha1":"e401ee9ab4b362869689a15633ef4121cd55596c","sha256":"05a9ac8f1bf0ef62543956804da91bdd8c1f695c656702bdb37777debf5d6205","sha512":"6df0b088d4ee5af666001c175405f7b4bd86fd2c1adb928a218fd12898e1afc25f77e40b93ce63f253a7a190ad405c0f3c0080db1b35f4e5c51e59af72a95e2c","ssdeep":"","tlshash":"cbd0a7906f359112082193d198d8171f144a1446c04a42475efe4bf4646810c3212856","first_seen":"2026-07-23T14:12:10.520004Z","last_seen":"2026-07-23T14:12:10.520004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1572,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:44.081Z","timestamp":1784815904081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f860fe5c2cb66987705504bd9a9cd50f","sha1":"016660eca23206ed49d95edd314585cf07e28d85","sha256":"e87a12f95f2a642dfcc6b879856b77a59f78bd5575672879bb89916e0b18283a","sha512":"e8afa088ed762ff332c94154d2c5adc1d0e3342ae7f3909346b5671f6288a69d2e2224414537bddefa305fb9163e14b5e5f3c864a9592d4126b296d20d4c0e71","ssdeep":"","tlshash":"1ad0a7906f358016083293d299d9135e548a10858045428a5efd87b8686c11c3212c57","first_seen":"2026-07-23T14:12:10.52251Z","last_seen":"2026-07-23T14:12:10.52251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.943Z","timestamp":1784815890943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-2f0fa\"\r\nexpires: Fri, 24 Jul 2026 02:11:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192762,"size_decoded":27355,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"cb46b85888b78de64c1f51bc7797aacb","sha1":"e57147e69810b9ee63af657969ddfd6c456957e3","sha256":"652650f2c09a63e822932e07d79583c64a996e44ff680e2a9183c2a7c5b2531e","sha512":"cdf48d3e0b60cd162995316ce921e3285248d481378251f13403c39302baba3efe6332a537cccf255e2261b8c39d719ab1a9efd83e97111ed321e11dd0eefdb1","ssdeep":"1536:rQGFA+QbGwz48MIEtQ12c2Jsj+aeHYAVmJz600I40Yw:rQGqAVmJz600I40Yw","tlshash":"311492a7f581201ee493c10995d2bffe057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-07-23T14:12:10.525057Z","times_seen":3292,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/xm/doge.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.976Z","timestamp":1784815890976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /xm/doge.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-838\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2104,"size_decoded":2476,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit/color RGBA, non-interlaced","md5":"ff0c62c872d877837881793431cf064c","sha1":"8ee9cdfe43cfba24078529fa23984ab9e9d99a76","sha256":"c146f8822178b5581dd5eb80071e9824e1634252a4cd0d25b9675b0cb3da570e","sha512":"2416ae2389993012befe574c4ee91c47b6101f3e89b7582d25ce214e248e5305f327183c2a7222259b9aeae09ff7315edeae1ff11c8be3304ca11d5cefeb09ff","ssdeep":"","tlshash":"b0416e07f3ddbe79ccd66bb71348e024d01ff7e1b8010b98a42a4c565258c6f215c44b","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.526108Z","times_seen":5393,"resource_available":false,"data":null}},"time_used":2213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_ltc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:34.081Z","timestamp":1784815894081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ltc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=ltc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":199,"size_decoded":536,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6163c866184f186f803789f981d239f1","sha1":"43a391a9d1c9bd8e07a062cba9c90da19b36022b","sha256":"51f543be552043cd84cd362278d24b1ecdd2b1ce9ce15a6cb70e9460094d21a3","sha512":"6459ce25c3b0ca95a2e157ff432dbe70543dcff07ce0d3b9d5af1f3e6acbebeb74cf3ad373a0dc9cd97ad479a0cc5578bdf332833b45f39350df4a101c3208c0","ssdeep":"","tlshash":"ffd0c9d4ab7d46250831abd1a8ea165ea48e4896d09642096bbe8ab824586083626826","first_seen":"2026-07-23T14:12:10.527035Z","last_seen":"2026-07-23T14:12:10.527035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1716,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eth","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:43.103Z","timestamp":1784815903103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":540,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c5b6a700429e3810811d47db9a8c24ea","sha1":"108239d0f332b7c8bd248438253de33b406d16fb","sha256":"8e101e90473a4a268ec135991042eda38cac750dd10241d6c279789f46155adc","sha512":"303915c5ec7bf07cdf21e7fe397acb9349d436be05efbd185180603d91519c7caaf0a7a434638b289ddfa4e11de430dab6b46a767e16f98817b0980f85042b77","ssdeep":"","tlshash":"24d022d12e38482a1872e3d1a8dc2b3e204e44c3c082430a2aff8b7d18ed80c7663d23","first_seen":"2026-07-23T14:12:10.529215Z","last_seen":"2026-07-23T14:12:10.529215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:52.082Z","timestamp":1784815912082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"04ac50f95b640ac5ae5c07b488d93bb7","sha1":"722d71610c2ad840f9b568d75e1ab3a118f5fe7a","sha256":"8aaa424dfbbcdc57bbd3cca5cf34776e80df4bb322f9c4dd6a9b81a36570c0b3","sha512":"f9fbb21b0fdb1652e73a361cf9b846d1c504dc3f3e3ac4653a1ecbcc9d8f143dbbb0d46a942dfcc0fd7bf204767f6514826e5a06a09ff8edc63ddb042f711ba7","ssdeep":"","tlshash":"fad023d07f3541120c31d3d298f41b1e164a0487804543465efd47b474dc00d3312c5b","first_seen":"2026-07-23T14:12:10.531401Z","last_seen":"2026-07-23T14:12:10.531401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eth","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:52.103Z","timestamp":1784815912103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204,"size_decoded":539,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"22058fbb2d84891e608078d4ba16787e","sha1":"4ee64323b21d70c20340bfdc648212fa2b684507","sha256":"5c7a1552b2e5e252841ad8ba10dccaadb782483694ae740a255594ea075782aa","sha512":"3e7a770c8fe77ce1054fccdfa2df245c1e97e64ac9142293b99a5d3be94085114a012720829305b278e9a846dd51502189e8f9db070e2e9d391bc2a319bb9779","ssdeep":"","tlshash":"7ad023c02e3404191871d3d1a8d8173d144d04c1c08243051aff877c24dc408b336c22","first_seen":"2026-07-23T14:12:10.533434Z","last_seen":"2026-07-23T14:12:10.533434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_itc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:55.080Z","timestamp":1784815915080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_itc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=itc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.535413Z","times_seen":342,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_ltc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:56.104Z","timestamp":1784815916104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ltc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=ltc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199,"size_decoded":536,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6163c866184f186f803789f981d239f1","sha1":"43a391a9d1c9bd8e07a062cba9c90da19b36022b","sha256":"51f543be552043cd84cd362278d24b1ecdd2b1ce9ce15a6cb70e9460094d21a3","sha512":"6459ce25c3b0ca95a2e157ff432dbe70543dcff07ce0d3b9d5af1f3e6acbebeb74cf3ad373a0dc9cd97ad479a0cc5578bdf332833b45f39350df4a101c3208c0","ssdeep":"","tlshash":"ffd0c9d4ab7d46250831abd1a8ea165ea48e4896d09642096bbe8ab824586083626826","first_seen":"2026-07-23T14:12:10.527035Z","last_seen":"2026-07-23T14:12:10.527035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:31.534Z","timestamp":1784815891534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 23 Jul 2026 14:11:31 GMT\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":1291,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-07-23T14:12:10.536406Z","times_seen":1578,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_usdz","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:34.097Z","timestamp":1784815894097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_usdz HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=usdz"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":512,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf0f004805bf908bfa983d83ce1eec53","sha1":"14573b904184dbf3ffd7291cc63e6e4fcca1020a","sha256":"470154e5201d3ca4842297d94259afd6444c099c196e7cb2d53ecf969f7a9e3f","sha512":"2b1ff72cdb08dca7305db83cf39996b49cac6dafbd9dd3183b54d18183ecb12b55b938252c797c77fe2294070c33f7da5742b16328e27b8451db6e89c7892e47","ssdeep":"","tlshash":"0dc080d45e3d4515017197c174f9376f746dc442c08182056bfecb7426fc1047115c26","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.537397Z","times_seen":73,"resource_available":false,"data":null}},"time_used":2263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:42.081Z","timestamp":1784815902081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6a6e708a029f009b099adb13d45f224f","sha1":"701bb637d435a1ae02daebfc69dd3122dc72013c","sha256":"d61789693d21f0a57af4eb17957cab6d68106910dda459169ab52aeb4e907505","sha512":"ebadbdb8872953e45536b7458f01702885895399e49a963a761bef46535b4c017e79af9485405ee5fa277d9885d9184ed5f01cf4c9be55ba6a2a2c0b620def2d","ssdeep":"","tlshash":"3bd023d06f7584160c35d3d29cd4075e285e50458045424f5ffd4bb4647c10c3312c57","first_seen":"2026-07-23T14:12:10.539618Z","last_seen":"2026-07-23T14:12:10.539618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1409,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eth","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:58.104Z","timestamp":1784815918104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205,"size_decoded":540,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"550295edcc03a13c44cc56fa2a530959","sha1":"089284b4c329dc142562758964935896849027ca","sha256":"c27a970bdb54807a823e14b9ccb5e89b6584d85fb777d0bd35a2a1aafd67f367","sha512":"25d0542f223ffc0b47d56e07293fc165c0a62412e573dd5205337c3f38ff32a8f16d534150a529a8a3640efc860a7365148c7b97ea559050629983766d1187d1","ssdeep":"","tlshash":"d6d022c02e38082918b2e3d2b4e82b7e604e00d2c087430aaafe8b7c14ec4087267c22","first_seen":"2026-07-23T14:12:10.542064Z","last_seen":"2026-07-23T14:12:10.542064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eth","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:12:01.104Z","timestamp":1784815921104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:12:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205,"size_decoded":540,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"40601b02e567759d72dd5ca948fa45f9","sha1":"3b1c4c114f449c2fe9c09079c6dd6f4033057c4f","sha256":"516809bb3e4e5a95595359bfc2af4cbfca303edcb353ab7b119bc4c8550771ae","sha512":"c5f5c0fc3125061214aa2a1d63a0a898e50042a3af49f75faa020239f867ea5d0cf1e5fa59286a4fbb681826de4412ef0a4589c61fc041bb6000d43050ce15f2","ssdeep":"","tlshash":"b1d0a9802f38092a4cb2e7d1a4d82a3e204d40828082420a2abe8b7c24e850872a6862","first_seen":"2026-07-23T14:12:10.544525Z","last_seen":"2026-07-23T14:12:10.544525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/hot-2.svg","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.966Z","timestamp":1784815890966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-1ade\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6878,"size_decoded":2067,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.547013Z","times_seen":5103,"resource_available":false,"data":null}},"time_used":1365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Upload/public/63bb24ffb8427.jpg","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.972Z","timestamp":1784815890972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Upload/public/63bb24ffb8427.jpg HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Jan 2023 20:18:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63bb24ff-24d34\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150836,"size_decoded":144969,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x546, components 3","md5":"4671fe2252bc71ea0859284304354bc3","sha1":"7bf6d27a3d303ca94521b261001dc26fdf4bb47b","sha256":"2d10c6f333aa1c6d3314e6e857e07a3e83a88337316ff9666fe45de57fd950be","sha512":"86b7d96239c4747158d75d0626528114ca8821873b63557de083b397c8c82fad1f0ab946df37487355d88829c83cbeb5415a613efe65715e21abd91a842f0023","ssdeep":"3072:cExW8Ly0nRCSnjEF1M2e61chqQ/yBdn5Mm9r1mlU4xzOIxAriz66cW:nDpU1V91kqQ/0dntJmu4xzwGzx","tlshash":"03e3014d21676d72f7d4fd803fcb889728cf4851b7388e5804afa5e7aa16d6ec4d240a","first_seen":"2024-08-20T14:46:39.481712Z","last_seen":"2026-07-23T14:12:10.548319Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/xm/jst.svg","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.981Z","timestamp":1784815890981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /xm/jst.svg HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-4b7b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19323,"size_decoded":6515,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b993b0a39d50c323edbb5886a19d56cb","sha1":"8e183944ff4dd3741c2b18f3a2d8962b1662b1a4","sha256":"450fcc35ab762f1b121f48150a7465b6a506fee918e24a80811134ee3a1d88c6","sha512":"754b0b31db60b3b2b0b2dcbc5f32e950bd8245c08d60d4d84a8bfd7a887167dd636d8f001232639952575ac6d2ac97103c66e04a016502472412283cffd680e6","ssdeep":"192:cu7OzkWdAPKtyK2Pe+6fsKO2uY/E4vVAAm7gbK1QQlS/exkPXGmZ7ayFePl5a0FJ:cuiz5dU7h2QuagXq36Np2aE/ao54Cgq","tlshash":"6a82238d9f564f6a9485b3fdafea5050648740ec39a8e2f4e7b44473f80c6a50c48de7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.551714Z","times_seen":3167,"resource_available":false,"data":null}},"time_used":2208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/xm/1613791952263794.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.982Z","timestamp":1784815890982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /xm/1613791952263794.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-a6c\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2668,"size_decoded":3042,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"d569a0c6c11b94ac63dc47b7baf58764","sha1":"b9c4f7fbd430b1ee1fe5a633a0a244c494cfda73","sha256":"645cdc8b30ba984f083d0f3a3a94dc6f7ea19e5bb7a9e09f65c5b03306c9e97c","sha512":"a566d71cfd8b73d2893dc861f1ac207ef44776a21babddf95d3f511c601983564bc6a3f1ad5b572a8fe58ea778dde45e27ec73277faa6dd3a9e784759595fafa","ssdeep":"","tlshash":"97515e9c71e2b274c793d07b8a014f3d9656447b2ee2333d8d0887c247097671d211f9","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.552646Z","times_seen":1040,"resource_available":false,"data":null}},"time_used":2207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/icon_margin.svg","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.983Z","timestamp":1784815890983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_margin.svg HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-654\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1620,"size_decoded":1057,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"283d6ddfb29042011328571a509df448","sha1":"3e486c50cfe119efc43c68ffafa349670c9f919c","sha256":"e88581cf4375fb6f9e7d94b4f9df4a667677d0d96384227c9a9228b1329f3308","sha512":"78e85634891dbc1423281f54e43c362b9cf8c75c83a070c34b36676b72b7b71e7793b2224c6d820eb870a0f7d854b336334b8ba0bca9125854139aaf2a97bc91","ssdeep":"","tlshash":"4e3120883a7ac39ce500e7ad981bb5ac3e1e04e96684c5d9c3e22c1078d2a59dc98dd7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.55345Z","times_seen":2581,"resource_available":false,"data":null}},"time_used":2206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/advantage_phone.511b5ee0.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:31.684Z","timestamp":1784815891684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone.511b5ee0.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-4ddc\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19932,"size_decoded":20096,"mime_type":"image/png","magic":"PNG image data, 500 x 1038, 8-bit colormap, non-interlaced","md5":"511b5ee00b739dea06dc9e55011afa57","sha1":"eb4ebfdfc46829471c2b86dc94b2e6bc83037fb3","sha256":"31b768d13aee263d4de7af1b5527bded34ad208284df0544dfe5fca9d00a41e0","sha512":"54e06fd802883d46f47e6f59f3d795d893ea797d8295c1cbb506b91a46d0d1efa79751a454049c3e6b2ac06dd5a312950658d96fa9f8c3cefd1d46f73e5ebda4","ssdeep":"384:/M6qoHUBFHYEFyqYA3ar7vWF6cCf9X+VFMsTB:vXHULHpFyRxc0X+Q0B","tlshash":"fc92d0c78eb6894efba7c47c81508bf2617a282190e61dd5fa61e3a3b432645db36071","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.554154Z","times_seen":5478,"resource_available":false,"data":null}},"time_used":1506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:46.082Z","timestamp":1784815906082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":539,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eb94a25a48985cf14597ecd582983666","sha1":"44f0d1723f3eca64cf770a67446b4901b0e8305d","sha256":"8d7147fa21ed0f717f2d49bc4cd95a9a9d96bb197c1538fa808aa1ba28b23c6e","sha512":"551613905dcf2ca8dd1e047e8a8271fc370a6f4ab02d9d122fdf04747382f0ebb91325c52a5dbb2456ee7baae584b3cd0a93dd7b0d8771a05f11b7400b4fa0af","ssdeep":"","tlshash":"b4d0a7c06a7590260c2193d2a8e5131e144e1446804a424a5efe47b464ec10c3212856","first_seen":"2026-07-23T14:12:10.554841Z","last_seen":"2026-07-23T14:12:10.554841Z","times_seen":1,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":694,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eth","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:46.103Z","timestamp":1784815906103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205,"size_decoded":540,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"730ccddaddb1cc65ae5cb0231ce7d7f2","sha1":"be0e17c65c20f207c528d662a877b8448deab568","sha256":"9a5f3cdc42fdb0ba0d083719ad27be7fa5aef7312e0380d2149f1883bfeac9ca","sha512":"5628c5d8789bbf9c25a2eecf1d840c6c8ba86a6d08e556e36d6a013a7c5b15d58af1b24ce58473abd7055c3b85beec7ac1f39aed31f56e048fff07a948440ce1","ssdeep":"","tlshash":"d7d023c02e34082918b2d7d1a4d82b7d10cd00c1d08347092afe877c18ed4087312c22","first_seen":"2026-07-23T14:12:10.556333Z","last_seen":"2026-07-23T14:12:10.556333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T14:11:28.817Z","timestamp":1784815888817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]}],"data":{"size":106511,"size_decoded":21729,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3500), with CRLF, LF line terminators","md5":"16d9ee4e8a933e6c45d1bf42eae715e3","sha1":"fbfa0602d3ecc031cdd3920fd79a5a99d2e3b5bd","sha256":"0f689541a62d71c017c04fc8a102567c01a8d2e4f53ef024865c588de90d94db","sha512":"b5943ae34128ffae9ab31fc76171de2bf7d53787875f0356ec7be134348e60d1b82e402ee7578e031efc41e645a34044bdf86522b30dfb4a7c7169a9dff7481c","ssdeep":"1536:uSdmw1gSu8R9haFvfSyydfNkvkTa3uTStGB3:jblu85TMkTy5tGt","tlshash":"c6a31b60f39c093a20a350cb9ba592ddb5ba5473e617c5153ebe46602fcac18e5337ec","first_seen":"2026-07-23T14:12:10.558069Z","last_seen":"2026-07-23T14:12:10.558069Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1742,"timings":{"blocked":-1,"dns":60,"connect":273,"send":0,"wait":849,"receive":0,"ssl":560},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Upload/public/63bb24ad544a2.jpg","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.971Z","timestamp":1784815890971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Upload/public/63bb24ad544a2.jpg HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Jan 2023 20:16:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63bb24ad-24d34\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150836,"size_decoded":144969,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x546, components 3","md5":"4671fe2252bc71ea0859284304354bc3","sha1":"7bf6d27a3d303ca94521b261001dc26fdf4bb47b","sha256":"2d10c6f333aa1c6d3314e6e857e07a3e83a88337316ff9666fe45de57fd950be","sha512":"86b7d96239c4747158d75d0626528114ca8821873b63557de083b397c8c82fad1f0ab946df37487355d88829c83cbeb5415a613efe65715e21abd91a842f0023","ssdeep":"3072:cExW8Ly0nRCSnjEF1M2e61chqQ/yBdn5Mm9r1mlU4xzOIxAriz66cW:nDpU1V91kqQ/0dntJmu4xzwGzx","tlshash":"03e3014d21676d72f7d4fd803fcb889728cf4851b7388e5804afa5e7aa16d6ec4d240a","first_seen":"2024-08-20T14:46:39.481712Z","last_seen":"2026-07-23T14:12:10.548319Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/home_head_bg.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:31.664Z","timestamp":1784815891664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_head_bg.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-cf649\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":849481,"size_decoded":817931,"mime_type":"image/png","magic":"PNG image data, 4336 x 1428, 8-bit/color RGBA, non-interlaced","md5":"1cbfba6198f4e4ff700eb43de61092ac","sha1":"ff03b54f67e1a0ae20c274c3d06ee52c3dd6ee50","sha256":"618a8249a51b933013f55571d8cdcb16e26863c921c82170e79fcbcb582eea95","sha512":"cb12167584983054c4911ee8604171dc08c8f89fef64c97ef3eb8dca7f424ce7d34b87924419f0e76e7a4b23f231371bef37231639bbb36c71950fdebbae40cd","ssdeep":"24576:2nw3WzrNqGPQiPxmnC+YarisIgK+Xy/6Nn/WMISk:2n+iQGhPxmrY651qGn2","tlshash":"7405224ca0eef889cc125b351ddbcf8d52a430b498ef6719bb63bd20895d9cd6877620","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.559395Z","times_seen":3677,"resource_available":false,"data":null}},"time_used":1525,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/ios_down.e011cb37.svg","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:31.678Z","timestamp":1784815891678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/ios_down.e011cb37.svg HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-2edd\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11997,"size_decoded":4830,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e011cb37e1cdc749fa40e455f952c628","sha1":"c102a94a6beb0a26de83c2e21ab6ab409f265e88","sha256":"5b8c67057adbf739c8bbe363ef30d3e57638991690cd9930aa237e5b408849ac","sha512":"a92a160de1026815ca8078f6cc059fb8fba29284a5c792295a9755e8f6e3c10ae138c90b0cac9774f35cdf430106e4a7ccb5c88729e9750e867cf826479001fa","ssdeep":"192:sb39cIK/24cUfDfcFDOlozy6RWSmwQn0F3TRe3nclNXAJdlIPprWl:2mIK+OrcFKozy6RrIni+nKNXAXlI0l","tlshash":"9b3255f79354c0c4791e99e5cc3f1ae93a0ef0fb9a81a08832ade841e753ddd865ad44","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.560082Z","times_seen":4126,"resource_available":false,"data":null}},"time_used":1511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/community_bg.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:31.688Z","timestamp":1784815891688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/community_bg.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-3c99c\"\r\nexpires: Sat, 22 Aug 2026 14:11:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248220,"size_decoded":237136,"mime_type":"image/png","magic":"PNG image data, 2892 x 936, 8-bit/color RGBA, non-interlaced","md5":"3107a5d7de66ac526ba295a6ccb85e2f","sha1":"7ca2f1ffe3ed6dfd6260e8a47643d30d6223aeb9","sha256":"1021f5b23b901a121fcf0f78866fb66c978411d309aef421c54af4cb09ff1b6f","sha512":"262a6554428da7f2bffcc71915ee13f5e9a504a2e76af61499ba7ec68713fdbba8b2f52d9b6ff8a9b13ae649103c6aaeb2e89f0dcf5411ec636a7c6ca5c26f7d","ssdeep":"3072:2cI5zu8n4youkJkjKrt88rRhc0ZmoZ/UYO5+90yCOo9XHhNkHLfuZVrD0BMdJ2oo:2V5b4G0ks8ybkwT9vBo9R2iP30BPdb9","tlshash":"73341284fd1e6df6cdf40db008629f4c7935a6ad8835d713a3b6e15d9eb754008be680","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.560822Z","times_seen":5177,"resource_available":false,"data":null}},"time_used":2338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_bch","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:34.079Z","timestamp":1784815894079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_bch HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=bch"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202,"size_decoded":537,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f57a1475f6c77b79763c7589db6f284a","sha1":"d9b31f461224bce8267d28f95d75c4a5072cabc9","sha256":"227b6c6de80a7d4248065aa6d5fffbf7c514c1274243ce68aa0c7ba329fbc2b8","sha512":"63b23a8be634d31b8958a9bcf339b2febff031f1432f5a51784797c801533b352356269d129fc41874f98dbef4cef866b773076303bf39f9672c40c512f82ab5","ssdeep":"","tlshash":"d2d022e07e3898290c32e3d1b5d8072e688b5483f08045089efeca38006c30d3327c2b","first_seen":"2026-07-23T14:12:10.561559Z","last_seen":"2026-07-23T14:12:10.561559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_itc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:34.094Z","timestamp":1784815894094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_itc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=itc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.535413Z","times_seen":342,"resource_available":false,"data":null}},"time_used":2265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/advantage_phone_ui2.03eb46c4.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:31.686Z","timestamp":1784815891686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone_ui2.03eb46c4.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-1fc3\"\r\nexpires: Sat, 22 Aug 2026 14:11:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8131,"size_decoded":8402,"mime_type":"image/png","magic":"PNG image data, 620 x 414, 8-bit colormap, non-interlaced","md5":"03eb46c414ca4054d6aa8bcc6146e203","sha1":"1ad3fe2ee83e35506f404b3dc6110540539e32c6","sha256":"98f20bbbd1c55089292d663c5a641e6cb4d02e91149bd3b1dbfa3dc87168d1fd","sha512":"e59d6713424efe87e45984399aab1739b3b1ff7cde9fff91c83582110c669f9bf299ccb30a7286bec64c48243f887f701f27051f9e6e8b4445c9e927505db019","ssdeep":"192:vri1p22NLEFORfDwDmxiEVHkmrogfcftKLatznubkt:vriOMR8DmxiEVkafc4czuu","tlshash":"2ef1afc2d9d35ddf9d9c0b2b34cbf454844249d0eac68d05d74245a8f8be082abe3d9d","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.564135Z","times_seen":5521,"resource_available":false,"data":null}},"time_used":2339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:38.076Z","timestamp":1784815898076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8d86f02851271875e0f490763946d949","sha1":"e401ee9ab4b362869689a15633ef4121cd55596c","sha256":"05a9ac8f1bf0ef62543956804da91bdd8c1f695c656702bdb37777debf5d6205","sha512":"6df0b088d4ee5af666001c175405f7b4bd86fd2c1adb928a218fd12898e1afc25f77e40b93ce63f253a7a190ad405c0f3c0080db1b35f4e5c51e59af72a95e2c","ssdeep":"","tlshash":"cbd0a7906f359112082193d198d8171f144a1446c04a42475efe4bf4646810c3212856","first_seen":"2026-07-23T14:12:10.520004Z","last_seen":"2026-07-23T14:12:10.520004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1522,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eth","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:40.080Z","timestamp":1784815900080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205,"size_decoded":539,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"12693bb893cb88215f6af034fac42da1","sha1":"4693ac30420adbacfc61d828b54847d4b7ec14c1","sha256":"b80cd40c37eb9ba6fda914d998b8be33c3f31f831a700e8fad3eb05713bbb7af","sha512":"21843a1d8f18e81e2a227ad74ad3135829ecb458aa7c1787ea35d3812b427306772a9ed27bceb6e9691a2ee2e90e139c85e4e3741496e8b1cf25816b0139a423","ssdeep":"","tlshash":"45d0a7c16e3804151871e7d2a4d8172d544d0482808282051abe877814a84087262826","first_seen":"2026-07-23T14:12:10.565778Z","last_seen":"2026-07-23T14:12:10.565778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:40.082Z","timestamp":1784815900082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6a818d2759653dbff871d5c1da01363e","sha1":"c88a771fe27a7685ea426aad8d6d659c8f21685f","sha256":"cfdc538159e52baf1b829c92bb62077872ca2688c907f381c914908beba0a1ff","sha512":"f6a38dd41586335cc6ae5cc0d6fd93846843ae186a629a3c4cd7b9aec72b8c17cb9dd4163c4ed50942292197f8b35e2ed4876a24f9cbcf0a5f00cc154c714542","ssdeep":"","tlshash":"3dd0a7c05e3580160c2193d199d5031e6c5e1086808586475ffe4bb4686810d3212856","first_seen":"2026-07-23T14:12:10.567783Z","last_seen":"2026-07-23T14:12:10.567783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3009,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3009,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:48.081Z","timestamp":1784815908081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"04ac50f95b640ac5ae5c07b488d93bb7","sha1":"722d71610c2ad840f9b568d75e1ab3a118f5fe7a","sha256":"8aaa424dfbbcdc57bbd3cca5cf34776e80df4bb322f9c4dd6a9b81a36570c0b3","sha512":"f9fbb21b0fdb1652e73a361cf9b846d1c504dc3f3e3ac4653a1ecbcc9d8f143dbbb0d46a942dfcc0fd7bf204767f6514826e5a06a09ff8edc63ddb042f711ba7","ssdeep":"","tlshash":"fad023d07f3541120c31d3d298f41b1e164a0487804543465efd47b474dc00d3312c5b","first_seen":"2026-07-23T14:12:10.531401Z","last_seen":"2026-07-23T14:12:10.531401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:50.081Z","timestamp":1784815910081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"04ac50f95b640ac5ae5c07b488d93bb7","sha1":"722d71610c2ad840f9b568d75e1ab3a118f5fe7a","sha256":"8aaa424dfbbcdc57bbd3cca5cf34776e80df4bb322f9c4dd6a9b81a36570c0b3","sha512":"f9fbb21b0fdb1652e73a361cf9b846d1c504dc3f3e3ac4653a1ecbcc9d8f143dbbb0d46a942dfcc0fd7bf204767f6514826e5a06a09ff8edc63ddb042f711ba7","ssdeep":"","tlshash":"fad023d07f3541120c31d3d298f41b1e164a0487804543465efd47b474dc00d3312c5b","first_seen":"2026-07-23T14:12:10.531401Z","last_seen":"2026-07-23T14:12:10.531401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:54.083Z","timestamp":1784815914083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"04ac50f95b640ac5ae5c07b488d93bb7","sha1":"722d71610c2ad840f9b568d75e1ab3a118f5fe7a","sha256":"8aaa424dfbbcdc57bbd3cca5cf34776e80df4bb322f9c4dd6a9b81a36570c0b3","sha512":"f9fbb21b0fdb1652e73a361cf9b846d1c504dc3f3e3ac4653a1ecbcc9d8f143dbbb0d46a942dfcc0fd7bf204767f6514826e5a06a09ff8edc63ddb042f711ba7","ssdeep":"","tlshash":"fad023d07f3541120c31d3d298f41b1e164a0487804543465efd47b474dc00d3312c5b","first_seen":"2026-07-23T14:12:10.531401Z","last_seen":"2026-07-23T14:12:10.531401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/xm/1613786513998262.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.974Z","timestamp":1784815890974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /xm/1613786513998262.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-adc\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2780,"size_decoded":3119,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-07-23T14:12:10.569082Z","times_seen":22121,"resource_available":false,"data":null}},"time_used":2215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/xm/5f87397132a8b02.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.978Z","timestamp":1784815890978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /xm/5f87397132a8b02.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-998\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2456,"size_decoded":2775,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.56978Z","times_seen":18901,"resource_available":false,"data":null}},"time_used":2211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/advantage_bg.a5d6d444.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:31.682Z","timestamp":1784815891682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_bg.a5d6d444.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-77e9\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30697,"size_decoded":30113,"mime_type":"image/png","magic":"PNG image data, 1392 x 1048, 8-bit colormap, non-interlaced","md5":"a5d6d444c8524a6d8e39fa1618582284","sha1":"4fda97683b94717d7597718b1e01c4a091f78ff2","sha256":"b2503b762cb8bf80f11571c1a10ac888258b78cc2a3a847780dfecef23dbb39b","sha512":"cfaf1fb56063ecbfc8d8a07ca56e6be8663b32188308ea349debd55b57e847c8005dbcbb1d72dfb8a7ca7873da81e44ed4b993345d673cf78bb3d3045f5cca11","ssdeep":"768:J1+dBPa7fkey90Yf5vWOjCuMg4+26RwDN1OvagerN6gA30Mh:3+dVa7fke7YlV14+d/vageR6gI","tlshash":"dad2e1dcf0f1d689567b11af43f47e48f5a5377e223344a05bade009a28095b3a7b41e","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.570414Z","times_seen":5454,"resource_available":false,"data":null}},"time_used":1507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eos","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:39.079Z","timestamp":1784815899079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.535413Z","times_seen":342,"resource_available":false,"data":null}},"time_used":1805,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_iota","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:47.081Z","timestamp":1784815907081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_iota HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=iota"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203,"size_decoded":537,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"63351bfb0e6a39cf5ca23f7c0423e906","sha1":"acee5b93040406312244cc8d61c9f0ad9732b105","sha256":"fcb538d6c3ebfb14dd4d5130d25d0563f2beb517a4335130e35fe6ee080d2e3b","sha512":"78f01646e8c9a5bc13f51b67cbc3ce8c912da7a1123bde0b61f144272c79118f9d8c531cc9a551e3e1e02fbb881e0459bbdb70b6774744d8ad1edfca64e346c5","ssdeep":"","tlshash":"32d023d13e7c40170c71d7c05cd4171f54cb5545c0c153096bfe977810683183772c25","first_seen":"2026-07-23T14:12:10.571108Z","last_seen":"2026-07-23T14:12:10.571108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_doge","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:48.077Z","timestamp":1784815908077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"44e66aab146a3f3c482e60abe7330866","sha1":"b012f405abc6ad720a444b9713c458cf480106eb","sha256":"3300b073779420e3b752118f82a72bd0b745681050b3b60a9dd261ba350be10c","sha512":"2096145c34d128f5d94649ec94842a1e13d1511b66e10a5e6c540772fc743ff425142c77a8899a302041d9473c380949920f6790ee90fbca43d62801fb3ddfa1","ssdeep":"","tlshash":"c1d023d07f3811150c71f7d154e9271f94cf44c7804155195afd8679985c00c3312c15","first_seen":"2026-07-23T14:12:10.572332Z","last_seen":"2026-07-23T14:12:10.572332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_doge","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:55.076Z","timestamp":1784815915076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":209,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"44e66aab146a3f3c482e60abe7330866","sha1":"b012f405abc6ad720a444b9713c458cf480106eb","sha256":"3300b073779420e3b752118f82a72bd0b745681050b3b60a9dd261ba350be10c","sha512":"2096145c34d128f5d94649ec94842a1e13d1511b66e10a5e6c540772fc743ff425142c77a8899a302041d9473c380949920f6790ee90fbca43d62801fb3ddfa1","ssdeep":"","tlshash":"c1d023d07f3811150c71f7d154e9271f94cf44c7804155195afd8679985c00c3312c15","first_seen":"2026-07-23T14:12:10.572332Z","last_seen":"2026-07-23T14:12:10.572332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:56.082Z","timestamp":1784815916082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"04ac50f95b640ac5ae5c07b488d93bb7","sha1":"722d71610c2ad840f9b568d75e1ab3a118f5fe7a","sha256":"8aaa424dfbbcdc57bbd3cca5cf34776e80df4bb322f9c4dd6a9b81a36570c0b3","sha512":"f9fbb21b0fdb1652e73a361cf9b846d1c504dc3f3e3ac4653a1ecbcc9d8f143dbbb0d46a942dfcc0fd7bf204767f6514826e5a06a09ff8edc63ddb042f711ba7","ssdeep":"","tlshash":"fad023d07f3541120c31d3d298f41b1e164a0487804543465efd47b474dc00d3312c5b","first_seen":"2026-07-23T14:12:10.531401Z","last_seen":"2026-07-23T14:12:10.531401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.28","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.949Z","timestamp":1784815890949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 07:14:58 GMT","end":"Sun, 20 Sep 2026 07:14:57 GMT"},"fingerprint":{"sha1":"EC:66:E1:7D:32:40:88:F5:61:99:91:23:97:B8:39:95:69:67:C3:43","sha256":"81:BA:20:D3:CB:CE:E7:47:44:10:81:9E:F4:92:65:C5:28:F7:17:4D:3A:09:32:03:AB:F2:EF:2E:E7:90:01:C8"}}},"request":{"raw":"GET /jquery/1.10.2/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93100,"size_decoded":37445,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-23T14:12:10.574861Z","times_seen":21771,"resource_available":true,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":190,"connect":159,"send":0,"wait":172,"receive":0,"ssl":326},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/2.1.1/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.28","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.953Z","timestamp":1784815890953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 07:14:58 GMT","end":"Sun, 20 Sep 2026 07:14:57 GMT"},"fingerprint":{"sha1":"EC:66:E1:7D:32:40:88:F5:61:99:91:23:97:B8:39:95:69:67:C3:43","sha256":"81:BA:20:D3:CB:CE:E7:47:44:10:81:9E:F4:92:65:C5:28:F7:17:4D:3A:09:32:03:AB:F2:EF:2E:E7:90:01:C8"}}},"request":{"raw":"GET /jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Thu, 23 Jul 2026 14:11:32 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84280,"size_decoded":33779,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-07-23T16:37:50.387311Z","times_seen":10242,"resource_available":true,"data":null}},"time_used":1337,"timings":{"blocked":-1,"dns":187,"connect":159,"send":0,"wait":171,"receive":0,"ssl":819},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/js/layer/layer.js","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:32.362Z","timestamp":1784815892362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-4d83\"\r\nexpires: Fri, 24 Jul 2026 02:11:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19843,"size_decoded":7326,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-07-23T14:33:06.533383Z","times_seen":14035,"resource_available":true,"data":null}},"time_used":1664,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/favicon.ico","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:41.629Z","timestamp":1784815901629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:43 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4158\r\nlast-modified: Mon, 04 Jul 2022 17:20:10 GMT\r\netag: \"62c3214a-103e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4158,"size_decoded":4431,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 31x32, 32 bits/pixel","md5":"cef1fdcf0f902d25694d5ea83a3d8e97","sha1":"beed6c02f9875f1471122900f5d063d6fe67f0c6","sha256":"aaefc2dae382655fd38fef068fd3d8983038829141a7aee69b2748c21f11e8cf","sha512":"ad93af34db118050fa24f20b46cbe47e67ae07a671e92fed02710c78d0322591d662a83558ed27029574ace77f9e62b3e8cc5bd3b16d53aae700cb6edb661a17","ssdeep":"48:OmFtBetFrtn0t4+tPtHtRbtStj/tKJZri8jQ2nZb7PPPPPg0qlw:OPHCNvr5Q29E0qlw","tlshash":"c381d04bcc961255ea97103ef41383e1ac385ba64b9e710c2f687a1a381e77ed60470f","first_seen":"2023-05-22T11:04:23Z","last_seen":"2026-07-23T14:12:10.578427Z","times_seen":2103,"resource_available":false,"data":null}},"time_used":1646,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1642,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_flow","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:51.081Z","timestamp":1784815911081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_flow HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=flow"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204,"size_decoded":538,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c45ee57323cfebcdd9267d98e0c55f1f","sha1":"a2bc8465e8000823c3e163e72e5aafaa7f008a89","sha256":"cbaae5a6d1b40f6c1012ffd8eeb1cf2b17552dd9f331e749f0c7bd2f81451a3e","sha512":"2a2095c82e7443d83dbac45e93aae4ed66019bf35849cdea6aadb1490081f4acd03c9c53f70dd96099b5bb630c02f6d7bfceb70d8ee7e9ad0d2111609f69c098","ssdeep":"","tlshash":"aed022a0bf3801390c72f3c09ce9132e908d85cbd080860a2efd8a3c8568208333295e","first_seen":"2026-07-23T14:12:10.57921Z","last_seen":"2026-07-23T14:12:10.57921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eth","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:55.103Z","timestamp":1784815915103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":540,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"363c70e74516beabc1c51e8b0f617522","sha1":"ae1ae3cfd013dc06bd75d2d7a277d7240fa7b2af","sha256":"a3d5147a20b404d964d7fed5d2f8547d74d0b036a3c9ff387c2350d46455b4d1","sha512":"3780b3f01517c4382d090ccb3e03b088bebd6cba1e58a489d95b48a16177fd6d02a0272abbbeca050bf226c038757369fb269a6aae920b327cf23bfde4408523","ssdeep":"","tlshash":"5cd023d12f3405255c71d7d9a4dc273d104d00c6c08243061aff877c14fc50cb316c22","first_seen":"2026-07-23T14:12:10.581598Z","last_seen":"2026-07-23T14:12:10.581598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_ht","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:57.082Z","timestamp":1784815917082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ht HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 7\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7,"data":"coin=ht"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.535413Z","times_seen":342,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_ltc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:45.104Z","timestamp":1784815905104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ltc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=ltc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199,"size_decoded":536,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6163c866184f186f803789f981d239f1","sha1":"43a391a9d1c9bd8e07a062cba9c90da19b36022b","sha256":"51f543be552043cd84cd362278d24b1ecdd2b1ce9ce15a6cb70e9460094d21a3","sha512":"6459ce25c3b0ca95a2e157ff432dbe70543dcff07ce0d3b9d5af1f3e6acbebeb74cf3ad373a0dc9cd97ad479a0cc5578bdf332833b45f39350df4a101c3208c0","ssdeep":"","tlshash":"ffd0c9d4ab7d46250831abd1a8ea165ea48e4896d09642096bbe8ab824586083626826","first_seen":"2026-07-23T14:12:10.527035Z","last_seen":"2026-07-23T14:12:10.527035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:12:02.081Z","timestamp":1784815922081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:12:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204,"size_decoded":539,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"408d4cfd3b3389496d1fc257d1a0e853","sha1":"75ebb001a67f1e244b0501c910589e36f6da59bf","sha256":"76661ac7a3ad1d5ac0b51248ae1e82a396b3f2ebf2d0a1e987e10a7d1180d454","sha512":"b47449b3e8dea27a60e8ca69377f6096bf5f17ef436d0f5b628c6fc63059fdfcfd3cc4d70d9ec66215b44a98011c748e9d13b789155558e68a3f5497d44856ef","ssdeep":"","tlshash":"62d023d02f75d1120c31e3d1dcf4131f148e4041804543465efd47b8246c10d3322c97","first_seen":"2026-07-23T14:12:10.583592Z","last_seen":"2026-07-23T14:12:10.583592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/js/layer/layer.js","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.951Z","timestamp":1784815890951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-4d83\"\r\nexpires: Fri, 24 Jul 2026 02:11:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19843,"size_decoded":7326,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-07-23T14:33:06.533383Z","times_seen":14035,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Upload/public/63bb24c959ddc.jpg","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.969Z","timestamp":1784815890969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Upload/public/63bb24c959ddc.jpg HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Jan 2023 20:17:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63bb24c9-24d34\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150836,"size_decoded":144969,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x546, components 3","md5":"4671fe2252bc71ea0859284304354bc3","sha1":"7bf6d27a3d303ca94521b261001dc26fdf4bb47b","sha256":"2d10c6f333aa1c6d3314e6e857e07a3e83a88337316ff9666fe45de57fd950be","sha512":"86b7d96239c4747158d75d0626528114ca8821873b63557de083b397c8c82fad1f0ab946df37487355d88829c83cbeb5415a613efe65715e21abd91a842f0023","ssdeep":"3072:cExW8Ly0nRCSnjEF1M2e61chqQ/yBdn5Mm9r1mlU4xzOIxAriz66cW:nDpU1V91kqQ/0dntJmu4xzwGzx","tlshash":"03e3014d21676d72f7d4fd803fcb889728cf4851b7388e5804afa5e7aa16d6ec4d240a","first_seen":"2024-08-20T14:46:39.481712Z","last_seen":"2026-07-23T14:12:10.548319Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/xm/fil.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.979Z","timestamp":1784815890979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /xm/fil.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-8bf\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2239,"size_decoded":2613,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"bc0baed91ad63da79ebfd092f42c76dd","sha1":"8a4f9cb9ee821242971e3f29a770e5078218bdf9","sha256":"ac4d8dcc1a755104c19551dcd96fbf097a93e529f86f540d8e0d55328c09a16d","sha512":"7cd155866ec8308b41049d32de0fa72b16dd774355f36ffba0f8256b1acaa2fe9fc5ae6695166f22c655aefe314b161d525f1cd8eb78ed746c3374905b0406bd","ssdeep":"","tlshash":"0e413eb67b9fc403c77f858708ed5e6544225f0a69248d50051a7e6ebd2f1e8c5915cc","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.58531Z","times_seen":3551,"resource_available":false,"data":null}},"time_used":2210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/icon_contract.svg","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.984Z","timestamp":1784815890984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_contract.svg HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-487\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1159,"size_decoded":757,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8be2edf2728aa394553b4fd9a44471f0","sha1":"1afec38a2c761fbd902e1de55d280424335aeeca","sha256":"306f962a6980e05ac92e3e8d3b1818e864f5557237541ab81cf2a15c44a190aa","sha512":"cd25567c0782132f9dcf858b252b11d1343a57a747b1bdbb7094b31baa1074528bc86fafeb66ac71997b4f4ae50e20c56373774f0f79fbf4b2ed339be8000ed4","ssdeep":"","tlshash":"b421ce69623543b9f04a82b212c9f47f353e06d8f1cb44c9e5671e20206e82ebca96c3","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.586046Z","times_seen":2601,"resource_available":false,"data":null}},"time_used":2206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/advantage_phone_ui1.7a062617.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:31.685Z","timestamp":1784815891685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone_ui1.7a062617.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-1fde\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8158,"size_decoded":8323,"mime_type":"image/png","magic":"PNG image data, 620 x 384, 8-bit colormap, non-interlaced","md5":"7a06261784d3908ab66f836816376de0","sha1":"3ea8a00b11b016e46703e0b873f005eb5e70adf3","sha256":"c6aa1f5b958419cbaa53682faf70d19d2737d2fc3ec58aeda3f83de3802ac4d0","sha512":"fd838b02e21d15d948d357fcea888bc7fe11bbe2d268d82f6b5f14341b2f253f5ffc6f8f34bac7beb7cead9c4780f6d4ee0b1e73db99ad3c681839965c886572","ssdeep":"192:RCD7357jDYAgAY0UKt/wetdU7BxeTKgPG2ZgwPhlTAAAAAI+GpYSTOFgWsh:RC3357ZXt67reegPG2ZvPDgGhCCWU","tlshash":"4df1ae00e21cefc3fdfce446b5a9916f24b44271323294ce50a39b65d8f459fa7966b0","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.587322Z","times_seen":5463,"resource_available":false,"data":null}},"time_used":1505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_doge","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:41.077Z","timestamp":1784815901077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"44e66aab146a3f3c482e60abe7330866","sha1":"b012f405abc6ad720a444b9713c458cf480106eb","sha256":"3300b073779420e3b752118f82a72bd0b745681050b3b60a9dd261ba350be10c","sha512":"2096145c34d128f5d94649ec94842a1e13d1511b66e10a5e6c540772fc743ff425142c77a8899a302041d9473c380949920f6790ee90fbca43d62801fb3ddfa1","ssdeep":"","tlshash":"c1d023d07f3811150c71f7d154e9271f94cf44c7804155195afd8679985c00c3312c15","first_seen":"2026-07-23T14:12:10.572332Z","last_seen":"2026-07-23T14:12:10.572332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eos","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:49.078Z","timestamp":1784815909078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.535413Z","times_seen":342,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":735,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eos","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:54.078Z","timestamp":1784815914078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.535413Z","times_seen":342,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/css/base.css","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.941Z","timestamp":1784815890941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/css/base.css HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-64a5\"\r\nexpires: Fri, 24 Jul 2026 02:11:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25765,"size_decoded":6295,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"8739b7f6cc1db5ea89afe0a14afacd7a","sha1":"f7dc32e9b67f5a0190cdb0d641f141294522fe46","sha256":"446377cfd8abce9140615cc2df1cfd3c2e8f908f179cbe1c7bc6209ef1bd2f3e","sha512":"8daa0f9ebd76dc9e94f4c5cf0acd3380b91abe7186648e41574d747c9cd0bfc2a6c28ba80c0e34ce2aba079782d9061d73bb37010cd77f7f59bc5879a19612a6","ssdeep":"384:BpFiOVTjRmNi2RoLy6IbRiWc2FDwFxYorvRnEkEZ58s8BXR8G8LrB888t7jL5ZBe:Y4cN39FDwFx9EZS9YzqtRB8TF3MDdu","tlshash":"12c295a7dfa30901b81bc5a41ff9ab55236c8017910bdebd7fc53648cf462d898a27c6","first_seen":"2023-06-09T02:38:16Z","last_seen":"2026-07-23T14:12:10.587984Z","times_seen":2261,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/xm/4558.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.980Z","timestamp":1784815890980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /xm/4558.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-48b0\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18608,"size_decoded":18879,"mime_type":"image/png","magic":"PNG image data, 200 x 199, 16-bit/color RGBA, non-interlaced","md5":"c7e59bbd0ca773c704b906e229ca8383","sha1":"e191e030bfffacaa1b53ea83121a03955fd080ba","sha256":"22e62f07c3d37c4e0b8f717bda7ac0c60362fb80380c9f6def693dd4f9b4567c","sha512":"69dfd5a8bec0c1533adde28c322e96dcf9236b934a21668bc435f55f3284258881937ff92573a64188b4cd3ccd52f6d485eb4d864d4da0806753c71e385212db","ssdeep":"384:KR6xVqHk99Lm0m9/zkJMPoqgN09WuJFNFHaV2zbj69VmO:tvQk99K0m9/zQLqGeDJ9HHzbjnO","tlshash":"d682e0a4850add63e0b15bb72bad2753cd3d3a2020d4b2b53ebb09b468f090657a4ec4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.588593Z","times_seen":3386,"resource_available":false,"data":null}},"time_used":2209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/js/layer/skin/layer.css","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:31.988Z","timestamp":1784815891988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-36e0\"\r\nexpires: Fri, 24 Jul 2026 02:11:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14048,"size_decoded":3223,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-07-23T14:12:10.589236Z","times_seen":3270,"resource_available":false,"data":null}},"time_used":2038,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":2037,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_fil","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:49.082Z","timestamp":1784815909082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_fil HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=fil"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":201,"size_decoded":537,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9319522c435450fe134bc2ee226e0e38","sha1":"d6727dcc13b53d6ace349e3de5584c6374bc88ea","sha256":"66ca1dd05446445a26da80b007b292170a73160be917f7c2733db10a9a0f333c","sha512":"c6caa3b3b88daca6441440d408913c0109b8c7746d9f92253b88dcf7b3bdab42011367ba0ef8f76cbe618138c1335d16f232db1fb73040fc0f83f3a5b97eb469","ssdeep":"","tlshash":"07d022803e38042a0832e3d1a4f91b6ea4cd44879080a20aaafd8b3c269811c3312d37","first_seen":"2026-07-23T14:12:10.592167Z","last_seen":"2026-07-23T14:12:10.592167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":902,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":902,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:58.086Z","timestamp":1784815918086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"04ac50f95b640ac5ae5c07b488d93bb7","sha1":"722d71610c2ad840f9b568d75e1ab3a118f5fe7a","sha256":"8aaa424dfbbcdc57bbd3cca5cf34776e80df4bb322f9c4dd6a9b81a36570c0b3","sha512":"f9fbb21b0fdb1652e73a361cf9b846d1c504dc3f3e3ac4653a1ecbcc9d8f143dbbb0d46a942dfcc0fd7bf204767f6514826e5a06a09ff8edc63ddb042f711ba7","ssdeep":"","tlshash":"fad023d07f3541120c31d3d298f41b1e164a0487804543465efd47b474dc00d3312c5b","first_seen":"2026-07-23T14:12:10.531401Z","last_seen":"2026-07-23T14:12:10.531401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eos","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:59.085Z","timestamp":1784815919085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.535413Z","times_seen":342,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_usdz","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:59.094Z","timestamp":1784815919094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_usdz HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=usdz"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":512,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf0f004805bf908bfa983d83ce1eec53","sha1":"14573b904184dbf3ffd7291cc63e6e4fcca1020a","sha256":"470154e5201d3ca4842297d94259afd6444c099c196e7cb2d53ecf969f7a9e3f","sha512":"2b1ff72cdb08dca7305db83cf39996b49cac6dafbd9dd3183b54d18183ecb12b55b938252c797c77fe2294070c33f7da5742b16328e27b8451db6e89c7892e47","ssdeep":"","tlshash":"0dc080d45e3d4515017197c174f9376f746dc442c08182056bfecb7426fc1047115c26","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.537397Z","times_seen":73,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Upload/public/63bb2484affd3.jpg","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.967Z","timestamp":1784815890967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Upload/public/63bb2484affd3.jpg HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Jan 2023 20:16:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63bb2484-24d34\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150836,"size_decoded":144969,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x546, components 3","md5":"4671fe2252bc71ea0859284304354bc3","sha1":"7bf6d27a3d303ca94521b261001dc26fdf4bb47b","sha256":"2d10c6f333aa1c6d3314e6e857e07a3e83a88337316ff9666fe45de57fd950be","sha512":"86b7d96239c4747158d75d0626528114ca8821873b63557de083b397c8c82fad1f0ab946df37487355d88829c83cbeb5415a613efe65715e21abd91a842f0023","ssdeep":"3072:cExW8Ly0nRCSnjEF1M2e61chqQ/yBdn5Mm9r1mlU4xzOIxAriz66cW:nDpU1V91kqQ/0dntJmu4xzwGzx","tlshash":"03e3014d21676d72f7d4fd803fcb889728cf4851b7388e5804afa5e7aa16d6ec4d240a","first_seen":"2024-08-20T14:46:39.481712Z","last_seen":"2026-07-23T14:12:10.548319Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_ht","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:34.096Z","timestamp":1784815894096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ht HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 7\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7,"data":"coin=ht"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.535413Z","times_seen":342,"resource_available":false,"data":null}},"time_used":2264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eos","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:44.076Z","timestamp":1784815904076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.535413Z","times_seen":342,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_iota","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:12:00.079Z","timestamp":1784815920079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_iota HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=iota"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:12:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203,"size_decoded":537,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"abab137206e21d0a5f6c20ff25149ec4","sha1":"330771440a62ab629e34beb44bcd90bf779dc6ed","sha256":"9bb87e9040a455f74ec94da3f27f631ff1f5aa6cb7b3c2687d60520e93cd2f3a","sha512":"f32260b64d759bb3c862c67a845260d40227336b2fa9a4095c2f640956c7a46864236269141f8676c13db9bb9cb0b4fb1f2dca8c87dc50acfba6a28d20e74cd6","ssdeep":"","tlshash":"c2d022d13e7c841b0cb1e7c05cd8271fb4cf9882c081830a6bfe9b7820a80193b32926","first_seen":"2026-07-23T14:12:10.593797Z","last_seen":"2026-07-23T14:12:10.593797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_doge","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:12:02.076Z","timestamp":1784815922076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:12:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":209,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"44e66aab146a3f3c482e60abe7330866","sha1":"b012f405abc6ad720a444b9713c458cf480106eb","sha256":"3300b073779420e3b752118f82a72bd0b745681050b3b60a9dd261ba350be10c","sha512":"2096145c34d128f5d94649ec94842a1e13d1511b66e10a5e6c540772fc743ff425142c77a8899a302041d9473c380949920f6790ee90fbca43d62801fb3ddfa1","ssdeep":"","tlshash":"c1d023d07f3811150c71f7d154e9271f94cf44c7804155195afd8679985c00c3312c15","first_seen":"2026-07-23T14:12:10.572332Z","last_seen":"2026-07-23T14:12:10.572332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/xm/1594057379245582.png","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.978Z","timestamp":1784815890978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /xm/1594057379245582.png HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-c13\"\r\nexpires: Sat, 22 Aug 2026 14:11:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3091,"size_decoded":3387,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"033d340b5a4a22d8e8590b98409158f3","sha1":"098ef5ee4b44f780df7f39c022ea491cacb32e7f","sha256":"0b53847e742884cbfbc563109bb99cacbc75fbb1bca892a1dbf68982e68778a0","sha512":"60de2b9014037bbd2f081ffe295d2cd0d0772bfc9b878986404981aff8df34a51611ffe2d214e0ce8f3849f9f9bda9e52b650d50db089953fde9bbb5b9725339","ssdeep":"","tlshash":"03512bcb908c59b6afe24ea002945ce48021c177ad3b4726963ae91e9f742f6070dc62","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.597879Z","times_seen":3317,"resource_available":false,"data":null}},"time_used":2210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.937Z","timestamp":1784815890937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 23 Jul 2026 14:11:30 GMT\r\nage: 1483237\r\nx-served-by: cache-fra-etou8220066-FRA, cache-bma-essb1270050-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":25650,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-07-23T14:50:19.464132Z","times_seen":25645,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":10,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.957Z","timestamp":1784815890957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 298\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\netag: \"62c3214c-12a\"\r\nexpires: Fri, 24 Jul 2026 02:11:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298,"size_decoded":649,"mime_type":"application/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-07-23T14:12:10.606051Z","times_seen":6160,"resource_available":true,"data":null}},"time_used":1119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_flow","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:34.090Z","timestamp":1784815894090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_flow HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=flow"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204,"size_decoded":538,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c45ee57323cfebcdd9267d98e0c55f1f","sha1":"a2bc8465e8000823c3e163e72e5aafaa7f008a89","sha256":"cbaae5a6d1b40f6c1012ffd8eeb1cf2b17552dd9f331e749f0c7bd2f81451a3e","sha512":"2a2095c82e7443d83dbac45e93aae4ed66019bf35849cdea6aadb1490081f4acd03c9c53f70dd96099b5bb630c02f6d7bfceb70d8ee7e9ad0d2111609f69c098","ssdeep":"","tlshash":"aed022a0bf3801390c72f3c09ce9132e908d85cbd080860a2efd8a3c8568208333295e","first_seen":"2026-07-23T14:12:10.57921Z","last_seen":"2026-07-23T14:12:10.57921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_eth","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:49.103Z","timestamp":1784815909103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":539,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"40aeab7f9a9336b424baa14f3adda24d","sha1":"ff96ec4270b13d21404108efd5b3d72bb3175054","sha256":"6423059c079478f3d349cc24f7a22d790e30719fbfdbe28485716747aefb046d","sha512":"d3d89139ce5f8ca0ed57eb17ffb6bce16c12bbac4fcdc1658c5b4eb2c32378a2c74a2c2aadc8da990cc7fee67a02c36f0ca0fd17c2fa667bb78fc1f0dbd7aabd","ssdeep":"","tlshash":"86d023d12f3405165c71d7d5a4dc173e114d00c6c082430d1afe877c14ed50c7b12d22","first_seen":"2026-07-23T14:12:10.607442Z","last_seen":"2026-07-23T14:12:10.607442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":796,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_jst","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:53.104Z","timestamp":1784815913104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_jst HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=jst"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":540,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d0d4c67a43b5b1e39f47f1417148dc7b","sha1":"87644f38967950c677172ff145d4b175185e2e9e","sha256":"7e370e8535bcf4bb013095364b8a0d1c0e477650aaca9625f8bf4efc7754cb18","sha512":"fb367bffba40831615bd0fbbc33de60be5e427641959517ee04dfd5183d34df8af2d93096ed452b9b1c1f7eb6039342086928fc201a2f13f2b185e6b5bf96b66","ssdeep":"","tlshash":"5ed0a7802fbd05210822abd154d9225db08e84ca80c14a0526be8e68181d9083111a1a","first_seen":"2026-07-23T14:12:10.610336Z","last_seen":"2026-07-23T14:12:10.610336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.939Z","timestamp":1784815890939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 8018\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\nage: 1907359\r\nx-served-by: cache-fra-etou8220197-FRA, cache-bma-essb1270072-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":8777,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-07-23T14:12:10.612848Z","times_seen":15147,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":10,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.954Z","timestamp":1784815890954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-2c9e\"\r\nexpires: Fri, 24 Jul 2026 02:11:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11422,"size_decoded":4062,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-07-23T14:12:10.613876Z","times_seen":14223,"resource_available":true,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Home/static/imgs/icon_etf.svg","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.985Z","timestamp":1784815890985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_etf.svg HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-55f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1375,"size_decoded":717,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e432564e65f8779c665055d5bf9f563","sha1":"dc529670e33c8baace696f7ed4c3ef3bbe9cad90","sha256":"2df7417ef0acff023bffea1bf0c6366884770c1dab4d191f24ec29c84d2b7031","sha512":"cec79f984f55609c45347e0a6b9e885fec23baadfb00fca179eeed2b2902e5a8659649b6e4d7c0711a40bff90b8acfb7b8823a89beb53f9e836211ef89f17c3e","ssdeep":"","tlshash":"cf21e9fd204aaa29b35dc352ab2961f4184610fe1f35e4c1dbf855143c1cbfe495a1db","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:12:10.614813Z","times_seen":2597,"resource_available":false,"data":null}},"time_used":2205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_bch","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:43.105Z","timestamp":1784815903105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_bch HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=bch"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202,"size_decoded":537,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f57a1475f6c77b79763c7589db6f284a","sha1":"d9b31f461224bce8267d28f95d75c4a5072cabc9","sha256":"227b6c6de80a7d4248065aa6d5fffbf7c514c1274243ce68aa0c7ba329fbc2b8","sha512":"63b23a8be634d31b8958a9bcf339b2febff031f1432f5a51784797c801533b352356269d129fc41874f98dbef4cef866b773076303bf39f9672c40c512f82ab5","ssdeep":"","tlshash":"d2d022e07e3898290c32e3d1b5d8072e688b5483f08045089efeca38006c30d3327c2b","first_seen":"2026-07-23T14:12:10.561559Z","last_seen":"2026-07-23T14:12:10.561559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_btc","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:12:00.083Z","timestamp":1784815920083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:12:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":542,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"04ac50f95b640ac5ae5c07b488d93bb7","sha1":"722d71610c2ad840f9b568d75e1ab3a118f5fe7a","sha256":"8aaa424dfbbcdc57bbd3cca5cf34776e80df4bb322f9c4dd6a9b81a36570c0b3","sha512":"f9fbb21b0fdb1652e73a361cf9b846d1c504dc3f3e3ac4653a1ecbcc9d8f143dbbb0d46a942dfcc0fd7bf204767f6514826e5a06a09ff8edc63ddb042f711ba7","ssdeep":"","tlshash":"fad023d07f3541120c31d3d298f41b1e164a0487804543465efd47b474dc00d3312c5b","first_seen":"2026-07-23T14:12:10.531401Z","last_seen":"2026-07-23T14:12:10.531401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_bch","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:12:01.107Z","timestamp":1784815921107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_bch HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=bch"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:12:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202,"size_decoded":538,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"113b1b4b340caa33cc8eb331437a3ff9","sha1":"57f12cacb1968004e3e98793daa4917407d990d3","sha256":"f7412189079409e80380c5a9f382932d65e2fb05853d6cc3a65eb3101b39020d","sha512":"7cdfbb5db77f9de7116c6cd53614e46350f26e3d96a2e21855763c233e953f52c1c8852202af582aac54fb43ca01179a30d1220c4a603f3b70e75417e4b4acf9","ssdeep":"","tlshash":"85d022a0bf3888250832e3d1b9d8072e688a1883f084860a1efecb38105c21c3313c2b","first_seen":"2026-07-23T14:12:10.616156Z","last_seen":"2026-07-23T14:12:10.616156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":747,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_fil","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:34.087Z","timestamp":1784815894087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_fil HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=fil"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202,"size_decoded":539,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f43eb89f1796a14a2bcd96b66a900f2d","sha1":"2fd572a8363b93650b982009e614a84c81b776d8","sha256":"60d1d3d5bb3d76e5f6460c6c5f15c79c2443f06e6c52a77bb0a9d7a2ec4c11db","sha512":"c0e45fd3d5d13de9e7612389d7ec10b6e8a9172b773d66205fa68dbb5bd18357165390c6867bf51d8fb8c7839b4862959accdc37688316d01216179351be67b2","ssdeep":"","tlshash":"8dd022c03f39412a0c76a3d1a8ea2f6e949d4587d0c0920b6afd8b7818ac20c3222d76","first_seen":"2026-07-23T14:12:10.618245Z","last_seen":"2026-07-23T14:12:10.618245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Ajaxtrade/obtain_jst","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:34.093Z","timestamp":1784815894093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"POST /Ajaxtrade/obtain_jst HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=jst"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":539,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8756ee33eaa5327bc772b7ac87d5bb84","sha1":"dc80ca4125f02e27dce0b396163bdba1793cd8fe","sha256":"15f2565af6ed9f56bbdf0acd3a19e4c1a75d57917ba0e65ef11d1df56805f96c","sha512":"0598ee06ca5efa58cf4e9e26cd09fa0d117e34657b30bcc45515922b29c487d94a929b7ebf2334305af5f807f34d71e8869f93e32e4ca3127534dc0a78b9cb59","ssdeep":"","tlshash":"4fd0a7802fbd05210861ebd094ed23adb1cec4c6808153051bfecb68181d9083111e1a","first_seen":"2026-07-23T14:12:10.619714Z","last_seen":"2026-07-23T14:12:10.619714Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1705,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Static/bootstrap5Slide/style.css","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.944Z","timestamp":1784815890944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 589\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\netag: \"62c3214c-24d\"\r\nexpires: Fri, 24 Jul 2026 02:11:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":589,"size_decoded":926,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-07-23T14:12:10.621265Z","times_seen":6148,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-aaaa.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"crypto-aaaa.com","domain":"crypto-aaaa.com","tld":"com"},"ip":{"addr":"143.92.59.78","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:30.956Z","timestamp":1784815890956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5smz.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:56:17 GMT","end":"Tue, 20 Oct 2026 16:56:16 GMT"},"fingerprint":{"sha1":"72:E4:33:F0:A6:A0:8A:61:44:84:65:6E:3F:C6:81:EC:88:39:83:67","sha256":"25:83:B2:FB:D0:C0:19:91:AA:C6:74:84:46:67:FB:A4:16:4A:E2:F9:C2:8B:1E:A7:F0:20:2E:69:2E:79:4D:00"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: crypto-aaaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-aaaa.com/\r\nCookie: PHPSESSID=jjvgpd3vm5f7q1pobuo6ss5e86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-1339c\"\r\nexpires: Fri, 24 Jul 2026 02:11:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78748,"size_decoded":23055,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-07-23T14:12:10.621998Z","times_seen":7925,"resource_available":true,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":875,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"crypto-aaaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"crypto-aaaa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crypto-aaaa.com/","date":"2026-07-23T14:11:31.707Z","timestamp":1784815891707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crypto-aaaa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 106812\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"1a13c-GxDOCA4lYqi36DlQRNPKg9wRKZk\"\r\naccept-ranges: bytes\r\nage: 1906722\r\ndate: Thu, 23 Jul 2026 14:11:31 GMT\r\nx-served-by: cache-fra-etou8220039-FRA, cache-bma-essb1270072-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106812,"size_decoded":107538,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-07-23T14:44:44.750961Z","times_seen":10512,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}