{"report_id":"527a2de6-2148-4dc2-a758-a0dec37743a2","version":6,"status":"done","tags":[],"date":"2026-02-28T12:01:09Z","url":{"schema":"http","addr":"magalu.crycoinbaes.com","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":0,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"magalu.crycoinbaes.com/login","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"title":"Login","dom":{"size":11499,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2356)","md5":"1e45316c2b6df905b9a94bf2b97fb5f3","sha1":"4531c98edb660274b9c93b8a3e7498cd683d7472","sha256":"458e03f4e2001ff1e125b25e0b3d47cacef62929482f556556f812176eca7eee","sha512":"bf9632cdb264dd62dc5a524d1323b527d3ba04266d361462a4e9227f10fd2898be443504f831d2e0e49b38ffd881e3f7faa3aa8abf7eef0500a12145bc4a665a","ssdeep":"192:H9mGcbXGXojzPZE4maw5WfBeSff0WiEAlKAB8/3JuoM6dAzxswss8xswH7o+AzrN:Ro6ZDodSJWJQ670H","tlshash":"91328524b15329671933a1b56ff7470a32ba840bd902dc5d7bdc22cccfcea899571798","dom_hash":"domhash746871c53c353473e7f3e662564f3343","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"magalu.crycoinbaes.com","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":0,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-04T12:01:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":2,"received_data":7049,"sent_data":945,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":3,"received_data":185330,"sent_data":1697,"comment":"","tags":null,"fingerprints":null},{"fqdn":"magalu.crycoinbaes.com","ip":{"addr":"154.13.7.180","port":443,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"domain_registered":"2025-05-17","domain_rank":0,"first_seen":"2026-02-28T12:01:09.590542Z","last_seen":"2026-02-28T12:01:09.590542Z","alert_count":0,"request_count":7,"received_data":253789,"sent_data":3560,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"magalu.crycoinbaes.com/","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":443,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"05aacf37d7268f8405e0a961ba18e538","sha1":"2f702426ddf75467bb0074964326fedf27425ded","sha256":"312264202571cd6750ce7fc1a8157cb6109309499a5fe5bc5a9d535dccacd7ad","sha512":"601f4a2c29a2831f16099330bc16487b67e5132bc8af8ae6897b9600846c5a3d5830d0b9609d3791c312af7cf1110669f68eac29c357c3776847000db693d316","ssdeep":"","tlshash":"1fd0a746571530a12963d0ef87aa24c4109f3867082eee5c7d3dcf811f9455912a1599","size":238,"data":"","first_seen":"2026-02-28T12:01:14.176891Z","last_seen":"2026-02-28T12:17:36.021446Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magalu.crycoinbaes.com/red/jquery-3.3.1.min.js","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":443,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-18T12:15:39.575221Z","times_seen":135726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magalu.crycoinbaes.com/login","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":443,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8635dcf5d130ac2f48158fe9f5ed89f0","sha1":"098dbe3e0cce6d027cfa0bad157258176f426d87","sha256":"8b8bdd745903e1be69808f2d831bb2fabdfaacc3c83971bbea51aaa577fb0416","sha512":"f65daa89c6b5fc2867c693f227621b7bf47eb943703e29b67b8c1672ba606fd804a5d702f31e2563aa2bec4273977701e7f4128b32840dcc35e2951394ca0377","ssdeep":"","tlshash":"8651210db3763db60db3723c8e6b06413276044b1401ed51791ca6cc8f9fb6d9575ae9","size":2946,"data":"","first_seen":"2026-02-28T12:01:14.178044Z","last_seen":"2026-02-28T12:01:14.178044Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"magalu.crycoinbaes.com/favicon.ico","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":443,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://magalu.crycoinbaes.com/","date":"2026-02-28T12:00:48.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magalu.crycoinbaes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 22:14:03 GMT","end":"Thu, 28 May 2026 22:14:02 GMT"},"fingerprint":{"sha1":"52:31:B5:0E:FD:03:57:DD:6B:46:17:E6:98:EA:87:96:0D:DD:AC:A2","sha256":"0D:FD:EB:62:58:B2:0E:44:09:C6:1F:46:91:01:20:60:55:AD:F4:51:86:18:25:A5:E7:AE:B0:AF:6C:D2:72:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: magalu.crycoinbaes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magalu.crycoinbaes.com/\r\nCookie: sf823796c=4s6hneaoi7m1mbbs7liehimj03\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 12:00:49 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 31493\r\nlast-modified: Sat, 28 Feb 2026 04:47:05 GMT\r\netag: \"69a27349-7b05\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31493,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 1546 x 1313, 8-bit colormap, non-interlaced","md5":"60337b7ca5bd7a100f37271fbe85009e","sha1":"5a463623d69d4f7be5713469f1d71d5a36a54064","sha256":"4082d1e169aa0c97c6c28953ae3b2508f3791ff5032ba6b5d0f200e68903c619","sha512":"4455f0362681171742ef5fc7c705c44a00b9b0063f5c81e401e061604a404230ddbaf79096d6c79cbb1c417fc1f9c0844fe57ed46ddbdfbda93555bf6795fa4a","ssdeep":"384:aAwD3OohX+5nVbeWtdASyn/Kv4eH4NXCh1EpnCVzbSlKQRCCfhBEO4ttX6jpqbRF:YKSWt2SqykaIAOl/hUtOqVcCb4p0Vbz","tlshash":"d0e2f14302576663dd28d100f60f183d10abbf46b08619750a5fa8aea6bc53fecc19fe","first_seen":"2026-02-28T12:01:14.16877Z","last_seen":"2026-02-28T12:17:36.007893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magalu.crycoinbaes.com/login","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":443,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-28T12:00:50.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magalu.crycoinbaes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 22:14:03 GMT","end":"Thu, 28 May 2026 22:14:02 GMT"},"fingerprint":{"sha1":"52:31:B5:0E:FD:03:57:DD:6B:46:17:E6:98:EA:87:96:0D:DD:AC:A2","sha256":"0D:FD:EB:62:58:B2:0E:44:09:C6:1F:46:91:01:20:60:55:AD:F4:51:86:18:25:A5:E7:AE:B0:AF:6C:D2:72:51"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: magalu.crycoinbaes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magalu.crycoinbaes.com/\r\nCookie: sf823796c=4s6hneaoi7m1mbbs7liehimj03\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 12:00:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11510,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2356)","md5":"90d29fe07c9fec9c510a33eb11b71943","sha1":"a34b636901a06f65cc3ba54577233a69b79759b2","sha256":"0cfa2c4baa141b06d2e9aea4308021117ca8425b97945417143d0c8ea636a889","sha512":"c58f3bae62e80b1a4fbbaca33459b6b4b0ccb473206f612d0b3d0b403a8870d6dd07f2b8c7dd181f7b4880d808f38214c679c9abfa641877170ec75f691feba2","ssdeep":"192:bGmGcbXGXojzPZE4maw5WfBeSff0WiEAlKAB8/3JuoM6dAzxswss8xswH7o+AzrN:8o6ZDodSJWJQ670H","tlshash":"89328524b15329671933b1b56ff7470a32ba800bd902dc597bdc22cccfcea899571798","first_seen":"2026-02-28T12:01:14.17017Z","last_seen":"2026-02-28T12:01:14.17017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://magalu.crycoinbaes.com/login","date":"2026-02-28T12:00:51.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magalu.crycoinbaes.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Feb 2026 12:00:51 GMT\r\ndate: Sat, 28 Feb 2026 12:00:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-06-18T12:16:50.776585Z","times_seen":48085,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":110,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;600;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://magalu.crycoinbaes.com/login","date":"2026-02-28T12:00:51.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;600;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magalu.crycoinbaes.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Feb 2026 12:00:51 GMT\r\ndate: Sat, 28 Feb 2026 12:00:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5112,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7ea0d1e91d063a9c4efdef119cbe79a7","sha1":"ead1a6dd0e5eca7cbc08cf9f50ee933be40cedfb","sha256":"2db1e6ace47619531b34d212791e8e2a7ad2813d956139f67cd8f46285eec43b","sha512":"e0e3f3d1b20c9f629cbcf546a99d7dd5cd53c5f27eaf8c7208e00518e647a85a6bc089bd1d4e6d5603656e3452220b7075fa2efcee21026ff0384cf4d779d195","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOxMaCyOxMauOxMahJc+ueOxMaCNuOwhaCyOwhaa:ACFJRSUCj3RoSC5VRed","tlshash":"59b1a2a0092fa540eb431cc663cf3e3a9e9e6192601584f99bfd0858dc7ec2a7375b1c","first_seen":"2025-11-02T20:46:52.939803Z","last_seen":"2026-06-05T12:29:18.14809Z","times_seen":63,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":113,"dns":0,"connect":23,"send":0,"wait":33,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magalu.crycoinbaes.com/red/jquery-3.3.1.min.js","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":443,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://magalu.crycoinbaes.com/login","date":"2026-02-28T12:00:51.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magalu.crycoinbaes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 22:14:03 GMT","end":"Thu, 28 May 2026 22:14:02 GMT"},"fingerprint":{"sha1":"52:31:B5:0E:FD:03:57:DD:6B:46:17:E6:98:EA:87:96:0D:DD:AC:A2","sha256":"0D:FD:EB:62:58:B2:0E:44:09:C6:1F:46:91:01:20:60:55:AD:F4:51:86:18:25:A5:E7:AE:B0:AF:6C:D2:72:51"}}},"request":{"raw":"GET /red/jquery-3.3.1.min.js HTTP/1.1\r\nHost: magalu.crycoinbaes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magalu.crycoinbaes.com/login\r\nCookie: sf823796c=4s6hneaoi7m1mbbs7liehimj03\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 12:00:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 04 Jul 2025 14:18:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6867e2c6-1538f\"\r\nexpires: Sun, 01 Mar 2026 00:00:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-18T12:15:39.575221Z","times_seen":135726,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://magalu.crycoinbaes.com/login","date":"2026-02-28T12:00:51.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://magalu.crycoinbaes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 19:50:45 GMT\r\nexpires: Thu, 25 Feb 2027 19:50:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 231006\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-06-18T12:10:30.031513Z","times_seen":13985,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":118,"dns":3,"connect":8,"send":0,"wait":13,"receive":1,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://magalu.crycoinbaes.com/login","date":"2026-02-28T12:00:51.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://magalu.crycoinbaes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 128352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 18:45:56 GMT\r\nexpires: Thu, 25 Feb 2027 18:45:56 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 17 Sep 2025 16:29:55 GMT\r\ncontent-type: font/woff2\r\nage: 234895\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128352,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-06-18T12:17:30.914254Z","times_seen":65909,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":65,"dns":0,"connect":9,"send":0,"wait":11,"receive":21,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://magalu.crycoinbaes.com/login","date":"2026-02-28T12:00:51.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://magalu.crycoinbaes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 19:50:45 GMT\r\nexpires: Thu, 25 Feb 2027 19:50:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 231006\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-06-18T12:10:30.031513Z","times_seen":13985,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":122,"dns":1,"connect":21,"send":0,"wait":8,"receive":2,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magalu.crycoinbaes.com/","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":443,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-28T12:00:47.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magalu.crycoinbaes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 22:14:03 GMT","end":"Thu, 28 May 2026 22:14:02 GMT"},"fingerprint":{"sha1":"52:31:B5:0E:FD:03:57:DD:6B:46:17:E6:98:EA:87:96:0D:DD:AC:A2","sha256":"0D:FD:EB:62:58:B2:0E:44:09:C6:1F:46:91:01:20:60:55:AD:F4:51:86:18:25:A5:E7:AE:B0:AF:6C:D2:72:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: magalu.crycoinbaes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 12:00:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: sf823796c=4s6hneaoi7m1mbbs7liehimj03; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2058,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"986198a1fa5a794cd99d2436a78251b7","sha1":"1769de34d43f68be569747f42673c2dbc58d9d99","sha256":"4f7b34e8fc6887cc1d8138c86ae176b0ae893c80765cdc3bc6aafc35d9960d91","sha512":"5a2dae740e4019746039c373cd11db02c34217d1e3747b403da64066f4fbe9936a6f357f016ae54ff34d75e41f5f1d029728f1255a19fb9aa4e122001a914bda","ssdeep":"","tlshash":"5a4173424a673104761394b82bf7136c12afd90bca07dd2c3edd6258cfc95c696e23c8","first_seen":"2026-02-28T12:01:14.174042Z","last_seen":"2026-02-28T12:17:36.010625Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1825,"timings":{"blocked":814,"dns":483,"connect":161,"send":0,"wait":195,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magalu.crycoinbaes.com/9.png","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":443,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://magalu.crycoinbaes.com/login","date":"2026-02-28T12:00:51.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magalu.crycoinbaes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 22:14:03 GMT","end":"Thu, 28 May 2026 22:14:02 GMT"},"fingerprint":{"sha1":"52:31:B5:0E:FD:03:57:DD:6B:46:17:E6:98:EA:87:96:0D:DD:AC:A2","sha256":"0D:FD:EB:62:58:B2:0E:44:09:C6:1F:46:91:01:20:60:55:AD:F4:51:86:18:25:A5:E7:AE:B0:AF:6C:D2:72:51"}}},"request":{"raw":"GET /9.png HTTP/1.1\r\nHost: magalu.crycoinbaes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magalu.crycoinbaes.com/login\r\nCookie: sf823796c=4s6hneaoi7m1mbbs7liehimj03\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 12:00:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 28 Feb 2026 01:01:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a23e73-12a40\"\r\nexpires: Mon, 30 Mar 2026 12:00:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76352,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3453 x 624, 8-bit/color RGBA, non-interlaced","md5":"bdcefa99c484fd3489175c1049aeb591","sha1":"bd228587465788ae57f831fb82e497b7b9b38a53","sha256":"10e07d9121f538fdb62f6691f10dbe01963a58c193f5b42233a64610bcbe5444","sha512":"553ef69a1a78a9c5d38b08a0e109148d7865b3092647e44da4782fa52019a378a844cdaec436fd043892c1e0c35a51cc8f0e9e73ddb140c7d992c104ec57d5b8","ssdeep":"1536:kum4dvyLYmN9St5qZJYo6cu9dMdt6KcuLXd4rOG4FWynQum1nayfC:1m4daLD9pso6b9Mt6huLXd4KG48ynJmO","tlshash":"ef73028d49c0894be2e3c23663ac074eb90baa9dd9441dcab7f7c9a47bd97e09464530","first_seen":"2026-02-28T12:01:14.175017Z","last_seen":"2026-02-28T12:17:36.014529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magalu.crycoinbaes.com/1.png","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":443,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://magalu.crycoinbaes.com/login","date":"2026-02-28T12:00:51.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magalu.crycoinbaes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 22:14:03 GMT","end":"Thu, 28 May 2026 22:14:02 GMT"},"fingerprint":{"sha1":"52:31:B5:0E:FD:03:57:DD:6B:46:17:E6:98:EA:87:96:0D:DD:AC:A2","sha256":"0D:FD:EB:62:58:B2:0E:44:09:C6:1F:46:91:01:20:60:55:AD:F4:51:86:18:25:A5:E7:AE:B0:AF:6C:D2:72:51"}}},"request":{"raw":"GET /1.png HTTP/1.1\r\nHost: magalu.crycoinbaes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magalu.crycoinbaes.com/login\r\nCookie: sf823796c=4s6hneaoi7m1mbbs7liehimj03\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 12:00:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Feb 2026 23:15:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a22580-28c6\"\r\nexpires: Mon, 30 Mar 2026 12:00:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10438,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"f838a3f771880f3625c214fb71275f8a","sha1":"6e0946c6b41c8070c088dbe52f092bf8139a7660","sha256":"41e1acd9c4b66be4086a76e4467db578cfd43491890b3e6c4bda4b442a56c600","sha512":"2825cb3ae237a2d4b0f83e7267ef58b5f3f29cd61c9192bb62f7ccfbee456f975ceaf21fb39cc31d63b45eb523c6518612fd0412b0b40a3bcc6682e2a6060c7e","ssdeep":"192:Q8eEEsM3vdmI4nwuN1evndmly+HwH5ESY+SmcrrbY+/aBAjmPHxe9DCp:QRZf4nwuN1eIdQHTShb3WcDCp","tlshash":"6622c01d987f25602fbc7733016dd3359db4bea8a0eea01835ee08569c19c81cb0c2b9","first_seen":"2026-02-28T12:01:14.175914Z","last_seen":"2026-02-28T12:17:36.015772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magalu.crycoinbaes.com/favicon.ico","fqdn":"magalu.crycoinbaes.com","domain":"crycoinbaes.com","tld":"com"},"ip":{"addr":"154.13.7.180","port":443,"asn":35251,"as":"NETLAB-SDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://magalu.crycoinbaes.com/login","date":"2026-02-28T12:00:51.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magalu.crycoinbaes.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 22:14:03 GMT","end":"Thu, 28 May 2026 22:14:02 GMT"},"fingerprint":{"sha1":"52:31:B5:0E:FD:03:57:DD:6B:46:17:E6:98:EA:87:96:0D:DD:AC:A2","sha256":"0D:FD:EB:62:58:B2:0E:44:09:C6:1F:46:91:01:20:60:55:AD:F4:51:86:18:25:A5:E7:AE:B0:AF:6C:D2:72:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: magalu.crycoinbaes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magalu.crycoinbaes.com/login\r\nCookie: sf823796c=4s6hneaoi7m1mbbs7liehimj03\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 12:00:52 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 31493\r\nlast-modified: Sat, 28 Feb 2026 04:47:05 GMT\r\netag: \"69a27349-7b05\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31493,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 1546 x 1313, 8-bit colormap, non-interlaced","md5":"60337b7ca5bd7a100f37271fbe85009e","sha1":"5a463623d69d4f7be5713469f1d71d5a36a54064","sha256":"4082d1e169aa0c97c6c28953ae3b2508f3791ff5032ba6b5d0f200e68903c619","sha512":"4455f0362681171742ef5fc7c705c44a00b9b0063f5c81e401e061604a404230ddbaf79096d6c79cbb1c417fc1f9c0844fe57ed46ddbdfbda93555bf6795fa4a","ssdeep":"384:aAwD3OohX+5nVbeWtdASyn/Kv4eH4NXCh1EpnCVzbSlKQRCCfhBEO4ttX6jpqbRF:YKSWt2SqykaIAOl/hUtOqVcCb4p0Vbz","tlshash":"d0e2f14302576663dd28d100f60f183d10abbf46b08619750a5fa8aea6bc53fecc19fe","first_seen":"2026-02-28T12:01:14.16877Z","last_seen":"2026-02-28T12:17:36.007893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}