{"report_id":"5653b667-4e9c-4280-b048-cebbdb6fed8f","version":6,"status":"done","tags":[],"date":"2026-02-07T17:27:50Z","url":{"schema":"http","addr":"dexstream.net/","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"dexstream.net/#/","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"title":"BitMart","dom":{"size":704350,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54623), with CRLF, LF line terminators","md5":"730579a2ef8bc857f375f7e935d0dfc0","sha1":"e002c05dfcd0a187f54c33edc4a76d1b476eb50d","sha256":"069552b61888e4cbf45dff85ad3c0a2df5107cac64db9c8768b71aacfc4b244b","sha512":"263a2d45efc0bd1ac64419e6fb96e1ddce1ec43aefd0f6bf909de70dddf49c70444e7d3225085cb200af03607f4341e8e4b9f3a7eba0fa7715be928755e93fed","ssdeep":"12288:EZdwG1ZAIkKDJ3bys5XrHeg05TKr3n7dOi:EZdwG1ZAIkKDJ3bys5XrHeg05T0n75","tlshash":"dce4afe2bad82008903bc656c686b7bcb93fba9343525dd76b057b318f526c73b0451e","dom_hash":"domhash41d5cea9f50be5520cc70e99014808af","first_seen":"2026-02-07T17:27:58.505348Z","last_seen":"2026-02-07T17:27:58.505348Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dexstream.net/","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-14T17:27:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-02-04T15:02:37.513902Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.ysblysbl1l5b.com","ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2024-12-11","domain_rank":0,"first_seen":"2025-08-29T22:09:38.905992Z","last_seen":"2025-11-30T15:52:33.290158Z","alert_count":0,"request_count":33,"received_data":255828,"sent_data":18661,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dexstream.net","ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":52,"request_count":26,"received_data":2852550,"sent_data":11942,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dexstream.net/static/js/pages-index-index~pages-setting-setting.4ed564d4.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c280941356153c515e0cfffc98d31277","sha1":"1ab4e2458a3dc5ac51277a1828cec7bebbd36716","sha256":"3e6b210520007b3551f9c675d7e2e76e2f1929c4d229a645725b75c1eecf8fb3","sha512":"56bd6941dfe33a3514dd7abae87f9cd9c01cf7e992bb518afa538d925e3086162e26dad8d07ec41b08996d33b82c5a4df888c431e2311fc98ac3e694f204ab07","ssdeep":"384:8msid4SXM40xls6lRH2DPCv8fzlshyYvCzVda5Ce13QsJnxB2ZYcTwpBtS:fsidpXMVls6lRHMPCEzlshySCzVcseVu","tlshash":"46b24abc3163f5de1191a9a9801f541ffe6a0c3fa01ea0a1e37f9dc459a478c5132b76","size":24562,"data":"","first_seen":"2025-11-21T07:53:29.634957Z","last_seen":"2026-05-06T21:12:35.134575Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/pages-index-index.89736d8d.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b50af0f530a5ee67ccb18036f97fa48","sha1":"a13a3476d79f54a43eb8a67827228f9c1599240b","sha256":"0992bea0402c4061c0bead7f6e7924a71cd6635a6fd48b59f46cb876039fc1be","sha512":"34319c04c3f03d541d4a250d3ca7ae1a0aaa98209edb06a7f85fe85ad79d5272029069df9628712482c47987ddc7ff45719715c79e962352c0429e28c421ca26","ssdeep":"6144:RQDxMIxR2uDjkRjr/9j4CPsrS02KGBsFMHy6hMGu:RQDxMID2uDjkV/9j4CKS02KGWee","tlshash":"90d4b7c6f2c821058277c311945f72fc9a3abd239205a851f5a5ffb15f16aca3729e2c","size":602142,"data":"","first_seen":"2025-11-21T07:53:29.649049Z","last_seen":"2026-02-07T17:27:58.576062Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-08-02T03:26:57.676252Z","times_seen":7125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/chunk-vendors.ebf55bb6.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e814fdd6bf1e8665e561db5dc8a7a063","sha1":"1dcad69cdd288f92e6f65a19d8884cf20450681e","sha256":"7334933ea8de881a6de5fb5daf64d54736f6ce0496dd50c7ca4326ebb8a7aff2","sha512":"23299feedd196b95cfc7ce79ecaeb921786b2a941aec9dc3d67253d8262e421b5475fb665b236c4e35af4442cde82e254f6320ac3cba92f6b6c6988fe8956eb7","ssdeep":"6144:f24CHdb0f+zWij1Z4fXtwTf3mTb/Cdxv+NTlrbEvm/dO+QhZxKvQzYKD/Ps2xdC:fGYicfdwTfBdh+tZ3OQvQzZP+","tlshash":"bf05f78df282b0b60be761b5403f220ba2376959b40ac4d4f675e4d4ad7894e2237f7d","size":833722,"data":"","first_seen":"2025-11-21T07:53:29.642123Z","last_seen":"2026-02-07T17:27:58.574502Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/index.ee4f1ea6.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b38614a64e6c6b547fd0aae9915955ab","sha1":"73c8d9d7ec3b585ce569625b9f330d679ef6810b","sha256":"5f2daf7fae7671b55508b873313ae7baf466b145bc45cd36ac23a1a85de8eb10","sha512":"e853492e7952d5a1928ec58c263268e4ab540d1ae2183591e8754222aa1fffa19bf6dfee141ba7ea43e044eb1b900b32c54bb425290955ec52a80095fc9919a3","ssdeep":"12288:Dfbwe1LOfiEHo9uEODC8D3M+8wNutICn/VAsdZDxiJRhLm0P8wQFnGEx0ZdwG1Z6:diPP870ZdwG1ZAIkKDJ3bys5XrHeg053","tlshash":"f6e439c7b4c1616852d3150291df72a863bedd352446b8e9f3c87a54db9738e2322b3b","size":698008,"data":"","first_seen":"2026-02-07T17:27:58.584001Z","last_seen":"2026-02-07T17:27:58.584001Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/pages-common-register~pages-copytrade-copy~pages-follow-index~pages-fund-fundTransfer~pages-fund-rec~2995ced8.0f1a084c.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bf96588625c0cd9ede4608f56ab0f69","sha1":"2607f3a60443f495e38629c5208e642e773cebc2","sha256":"d9d1264f0dfd48bc6aa18dfdcf358b6ccbf31180259dae8a2b9b84ecd68ca76f","sha512":"29c7e99d5d66a20fb248a501529a086b6218311ac7827530a051c7a9640ece2ab1e0c46ae2ca94fa78c55b417cc5991f71e44e9e9a524b89be48381ee7a9294e","ssdeep":"768:a1EupOzKX0LFJz18WVM9XO1FxthjVvUg1/:a2FK2Tz+dO1Z","tlshash":"53c33bc2fdc860048d6bd705954636fe9e2ffb630255acdafe812f384e2a1d726055ac","size":121887,"data":"","first_seen":"2025-08-29T22:09:45.396768Z","last_seen":"2026-05-06T21:12:35.119432Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/pages-common-about~pages-common-area~pages-common-article~pages-common-question~pages-common-registe~06bff5e5.6ab01489.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d2ef188e736cb38a708560d2e23505c","sha1":"ad4f0ff7a77fbeaf863644c262e86f808812a41a","sha256":"b1edb6feede8487a367837b69830609a4824b43e866694bd26ebf7dffbc7f954","sha512":"4dd21eb0143f830f9e2ee5af0f51a09fea437ee2e3e4292aafe98026ccf6c5101db12e0d72e66bd177801e95dec8f6a5ec678aed91fdcd8ce69bf79549afbf97","ssdeep":"768:fZrD5bY3YUgQnKb6QWm4AmCd0tG8e+W1MAbu7N8ChEAh8sd0Q2Z7wXH90tWNjZtC:fZrD5bg1sYId0FHoMqu7NdEAaM2O3OdX","tlshash":"69b3cdd2f6cc2840566fcf4e9341a3fcbbbaba2342697877e4622f244f772d62504558","size":109336,"data":"","first_seen":"2025-11-21T07:53:29.667508Z","last_seen":"2026-05-06T21:12:35.12529Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/pages-index-index~pages-transaction-index.dfaccdd4.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"674929a3f694256dc58c8fc168bb99c0","sha1":"8c3af778cac899a8628a9729737d5b171760d49a","sha256":"dbb5a572fbe32227c605183588b221a96d24ec1adbf782b84bd1a311f1870a2c","sha512":"dbefb3a0102ca45fca51b0b19a46021ed4b073f49fb84543e802767555d70fa2497a2b2fb9ab5512cc34c429c35942cb8f6f6ad1c2050f0e7042b3dcf5eb017f","ssdeep":"192:lyrHWXOGvc+/1fBjYbkoGu0tS2jwXFZmTlwt+TwftccWi16Yxz1gu8UG2/2e2g22:bQiE2j8FT+TwVccWi12Q5aIY2U+v","tlshash":"e553e7a2f7ec2006c567f743a56332f89a3bad7303016852da5d7f744e166ce2d825ac","size":61054,"data":"","first_seen":"2025-11-21T07:53:29.633421Z","last_seen":"2026-05-06T21:12:35.133065Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/menu?lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/menu?lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T08:58:24.820635Z","times_seen":17670069,"resource_available":true,"data":null}},"time_used":941,"timings":{"blocked":334,"dns":1,"connect":175,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/nav/nav-2.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/nav/nav-2.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 355\r\nlast-modified: Sat, 31 Jan 2026 03:03:34 GMT\r\netag: \"697d7106-163\"\r\nexpires: Mon, 09 Mar 2026 17:27:30 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 36, 8-bit/color RGBA, non-interlaced","md5":"bba6863c9929a3858b0fb3c77201ae8d","sha1":"f6d7dfa984b3ccf6d38d9d9051c0462578bfe9fc","sha256":"7519ccca854d4151acb7e3ef7546148612fa8be43bc7af75d98e29d65d7463fa","sha512":"9faabc908c44d52e21e308b116394e8fb4c12e31f3446b4bd8a7f5c7c418d4c064309f6c841614d018649652286b08d4ee6ebd1bf97134eae8fe3b0d9a090591","ssdeep":"","tlshash":"04e0c0c5f7e774c0d39223bf413e08260433c1ad3d55069ca31bcc55592b00b80c00d7","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.12163Z","times_seen":256,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"www.ysblysbl1l5b.com/socket.io/?EIO=3\u0026transport=websocket","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dexstream.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: MaQLO+De7IMYoTGfESsoaA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Sat, 07 Feb 2026 17:27:31 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: z9uZkm0I7gw/hjuLe/5IjAXEFyY=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T08:58:24.820635Z","times_seen":17670069,"resource_available":true,"data":null}},"time_used":1597,"timings":{"blocked":0,"dns":577,"connect":690,"send":0,"wait":160,"receive":1,"ssl":687},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/lh/deposit/config?lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /api/lh/deposit/config?lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=rRLYtJrvJOf66kPXNT8KTyltLdb3RpbK3VVAxwPz; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2205,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2def8d51e6b3712b075989df23e9fefe","sha1":"a8f81768bef3c7d4343dcb4df901a32868a6360d","sha256":"1414a16feb529b0f689633bdf498028e0df777f325d65e7737e9c9aa8f50a1f2","sha512":"2e49bec9f9814c28ec7c70b61b44a43b0c3ca07946015d62fee1f312ed51c9276be45958f067bb80df2e86ec6f1b4681802d06615a50b279f16822b6ba835ad6","ssdeep":"","tlshash":"ac41e76d725d9bf8c66509c602d6b5acb06b320f2dcb8ad833de9cac92d5531d019e33","first_seen":"2025-11-21T07:53:29.637278Z","last_seen":"2026-02-07T17:27:58.509293Z","times_seen":4,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/favicon.ico","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Sun, 29 Dec 2024 17:47:43 GMT\r\netag: \"67718b3f-10be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"ddc292a5acc47776d7535f0339db524b","sha1":"cd56b64f6ebaab79f63cbeabbb23d0e215aca2e3","sha256":"edd93c7271978fa624974bf332ec4449f6b336b85c6866847d33a30ab961f5fa","sha512":"7056eb4211094e6da683bb7ad4c5634881e79baf56e3e2b5f1e477b0e8fc4f0e3143fe3447b76d4e70a59cfcbe88ac3ba81c8fbc9f1bf9c565e785bfe383da40","ssdeep":"96:a7vIuNIfpfCaYIfz3MwWUfDCUP6C37WWmWsUF:abIudVIcBUb7WWmWsU","tlshash":"a791c45d3d48fe03e54486fc6bf15cc5aa91e93186b92131e977f427867af63bb04280","first_seen":"2025-08-29T22:09:45.344026Z","last_seen":"2026-05-06T21:12:35.130471Z","times_seen":6,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/news/list","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/news/list HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6ImdEVitqcmhXNzA4enlFOXk5MWNcLzRRPT0iLCJ2YWx1ZSI6InRjbStWeVhWeUp2blBNeFhhVFdvVWRWNzBNY01idGQzZFFcL09kWllYdmVYTjVNaTlRVWNyUTJRY3BtQ3crOXVSdzYwaWVoTVVVb0Fpc1BuOWNDMEswXC9zWkVlMTZOWnNJbCtqN0l6dUFFbVYyUHBVcEp0N2htdEpxdnhkUmdwUHkiLCJtYWMiOiIxODEyOTc0Yzk3M2FjZTg5Y2VhMDYzMzIwNzk4NWRlMDIzOWRkMjgwNjBhZjk5NmM0ZjBmN2IzZWJkZWUxZWM3In0%3D; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1577,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1e982042d3d1d672ea2db108dedfc74","sha1":"b36cb2c9ca33b53fc62a6ef791f127ca1f078db8","sha256":"3b8a192bbc02b51da43e8f3f0d917dcf4a677d06a561bdbb2e43a4501b8085e7","sha512":"a25ccb001ee95c63e1527bc2830f9fc2e40bb30504d87f0560a2a1fb05815bdfae2e575f24543cb37d487b79775b36a77027d6427eea23a24f46198709ff01f6","ssdeep":"","tlshash":"2f3134f67e5069bf92c013c468cfaa9dedde2113c644ea5e0588ade991147f0001f077","first_seen":"2025-08-29T22:09:45.333161Z","last_seen":"2026-05-06T21:12:35.102958Z","times_seen":6,"resource_available":false,"data":null}},"time_used":953,"timings":{"blocked":349,"dns":1,"connect":173,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/menu?lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/menu?lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T08:58:24.820635Z","times_seen":17670069,"resource_available":true,"data":null}},"time_used":943,"timings":{"blocked":338,"dns":1,"connect":173,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/news/list","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/news/list HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IlViVklSTGM1WDErdUpmUEw3MURHWUE9PSIsInZhbHVlIjoiTHVVb2lIUGhWV2ZkczBLbTJLcDF5aitoMlRNYnJqb3AwMlNcL0pNTDRWanpCTjZiSFk4YXFxZ3ZlNUJ3b2VrQUlNRm52V09iV2Q5T3RGZFpYNEtXSVllQ1hnYldlRFRqRjAzSElBMVZ5ekJDYWZlenN1UE0rRmFaTktaV2dRUm9SIiwibWFjIjoiNWVkMDI4YzBhNmQ1MDNiMDY0ZTQxMWZmMmNlYzA3ODcyNGM3YjFlMzMxYTc5ZjQ4MDdkMWNkMDIwNjVjYTk1NyJ9; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1577,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1e982042d3d1d672ea2db108dedfc74","sha1":"b36cb2c9ca33b53fc62a6ef791f127ca1f078db8","sha256":"3b8a192bbc02b51da43e8f3f0d917dcf4a677d06a561bdbb2e43a4501b8085e7","sha512":"a25ccb001ee95c63e1527bc2830f9fc2e40bb30504d87f0560a2a1fb05815bdfae2e575f24543cb37d487b79775b36a77027d6427eea23a24f46198709ff01f6","ssdeep":"","tlshash":"2f3134f67e5069bf92c013c468cfaa9dedde2113c644ea5e0588ade991147f0001f077","first_seen":"2025-08-29T22:09:45.333161Z","last_seen":"2026-05-06T21:12:35.102958Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1061,"timings":{"blocked":335,"dns":0,"connect":173,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=BTC%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:32.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=BTC%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:32 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IkFKb3hkaEhiMEFPRjZjdWJGVVFSQ2c9PSIsInZhbHVlIjoiYjlDd2FCRHp0bEdPVlwvWVI3WUVuUyswRXBzQ2t5TzdaT3ZpSVFUNUNOclJGc3oxSWhcL0dZM2cwQlc0WHJqdDZMekhtTzJFYXRscHhuV1B3SUE5N1ZseUtXQ3pPUWpcL1p5MHVOTUhUdFM2ZWV6XC93aVVtM29xY1ExNmRjMFwvdjBLNCIsIm1hYyI6ImFlYTAyNTg2YzE0NzhlMTA3YWIwZjdiNDAyNTY3YzZlZDhkNThmNzhjNThkYTRmZDM5MTMwZDI2M2VjMjU0ZmQifQ%3D%3D; expires=Sat, 07-Feb-2026 19:27:32 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14473,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d30dc433d04b67c6a4ef5bfd775a4781","sha1":"0d92e883d38dd81b9ca2cda6939f7956edfb0503","sha256":"6e1e669c394ebd7e7c94ff842b8b7182dd7d94eefcaa87dccacbc24baa692dcb","sha512":"d8c5d8aeff2e02db99c31d79da0bea5ca35337c3bfd9df58a55a26efbd6a1bb30896c24237205af6e82365457ea3b4369b64bb947191d71c00c975c271eb7585","ssdeep":"384:TNSi7u5gVIThwwPLVuTOzLi1VbYOR5gSWYcUroIAh+3YzJT1CrQ0jq:TNSi7u5gVIThwwPLVuTOzLsVbYOR5gSc","tlshash":"d652948073b91370d43a75c5aea24868429f937774c38ed642be08d3a5e1a7db216d3f","first_seen":"2026-02-07T17:27:58.519734Z","last_seen":"2026-02-07T17:27:58.519734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/icon/home-bg.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/icon/home-bg.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:02:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d70cd-2dabb\"\r\nexpires: Mon, 09 Mar 2026 17:27:30 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":187067,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 531, 8-bit/color RGBA, non-interlaced","md5":"cb97c37693d681a4dc8fb53d83fd0c3f","sha1":"7c7e02a326ef78773ae70ca06e428a4c1e9268da","sha256":"7db6d76800b4482bbef3ece1d2db75ea235bb799edff049635046fdfb8617ac9","sha512":"0477d0a3cdbc30bbd59bab9453ba89bcb8d9acf495f8175c35df26fd46fa3a2712bc126d481f24bd7d5f718e16126867ecd155370a02825924c59c7572db297d","ssdeep":"3072:N55TxTi4zf+oLjtpDCZ31sZ+iskI8ao668LQ0oxPL11xYWnhIipCtyuJm3ecG3q:BFe4v/tpDWsZ3aD68LtWhHCyuJmGa","tlshash":"b8042200a41aec6ead7d78b3d25501e2835624ae27f5f076c23638cddae6e01156cfe9","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.122639Z","times_seen":221,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=EOS%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:33.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=EOS%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:34 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6Ik9oMVZYR0o5ZnVac1A0bnNUeWNzcHc9PSIsInZhbHVlIjoieVhUNWpudlNsUnVyeWNjYlUyVVFuQUlYa3pSK1BsbGNLdU5UV1kyM3dwNlpwNmd3ckRTd2IrUjBJbGVieUlpYzhOMjlERWg2XC93ZEk5RTdwTzEwVkxsMUk4SzNsVjRWVUJTc1VQeEVKclQ4dmNPaXBvdUtHdXlsVlRFdm9UWVZhIiwibWFjIjoiNzFjNzQ0MWYyZTc1MjJhOTQwNWIyNDBhZjhkYWYyYmQ1ZTliYzIwYTY1OTZmOTU2ODgxY2IzNzQ0ODE1YjUxMiJ9; expires=Sat, 07-Feb-2026 19:27:34 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"136b02255a623f7c44544d5266e21ee6","sha1":"d16732370a4b4c9c029637920cd26afa2d422390","sha256":"fcca40d39e392ed1fed0515a2ed890128e3a461bc12240751cf2df7506160f86","sha512":"cc52574d8ea557037eccc98a0d0831b18956f9f6dc5d9c88dcb4b5a4a5abc88ba79470d35c772cc38bd8bc28159b911093b3375b72634bc6bea5ee8bc1c8e6c2","ssdeep":"","tlshash":"ba8000a2280e2c830c0a38cc880c8b8220e8a0808a200320ce8ea238cb080acb883830","first_seen":"2023-04-07T14:59:17Z","last_seen":"2026-07-23T15:53:23.475087Z","times_seen":219,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=BCH%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:34.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=BCH%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:35 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6InA3VWthbHJScjlGRDFXWFYyQkI2aHc9PSIsInZhbHVlIjoiRXJjWHJvWDlqREVcL3Nud3B5WmtPSEYxbFRjbTZEdUx3UEludkZSTFlPZ2daTHg1MTVwdXdQRTZHcFlvN2Z6TXM0Ujh2bzZHejFiYVROY21ONEVpTGFwa0JEN04zTEdCNEY5NXFiV0Y3eFdNNUk0d1orNGpSVFBCUHV4NE9IZW5EIiwibWFjIjoiYTc1ZDZjNmIzYzAwM2RlYThjM2NhZTJhMWFiY2I0YzAzNDk3ZjcwZTBhMjUxYmYyNjg1ZGFmMDUxYzQwMTQxOSJ9; expires=Sat, 07-Feb-2026 19:27:35 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12502,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"86d624b01ab6deaa766c3f822e6ae776","sha1":"9adf6c6732b3a966a8aff1f0e43b40549dc63060","sha256":"4a95d641e68ec48aa0ab7f4431afdf95e4470e69c7b395ceee29535ceebae648","sha512":"448636ff486ccba1afa570ce092cb6e794843e236289a1aa53bf2173ba42dd7255091da153142cea32cd829f017708b601e7ff12c3ab3537bb6d073899563906","ssdeep":"96:vZpWZ7MZWGZUYSaZBE9NcZ5YuZwgT3ZAhqZSEOZosZGuZZMZ3DZzjnZ23ZvxZtCp:eLZkEJ52I/D2UNCrT7X5xf","tlshash":"dd428e4066f851f1c03ee1c07b92697d425e33b764d28eeb42bf44da84f1a7ab115a3b","first_seen":"2026-02-07T17:27:58.523171Z","last_seen":"2026-02-07T17:27:58.523171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/pages-index-index~pages-setting-setting.4ed564d4.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/js/pages-index-index~pages-setting-setting.4ed564d4.js HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 31 Jan 2026 03:01:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d707f-601a\"\r\nexpires: Sun, 08 Feb 2026 05:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24602,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24522), with no line terminators","md5":"c280941356153c515e0cfffc98d31277","sha1":"1ab4e2458a3dc5ac51277a1828cec7bebbd36716","sha256":"3e6b210520007b3551f9c675d7e2e76e2f1929c4d229a645725b75c1eecf8fb3","sha512":"56bd6941dfe33a3514dd7abae87f9cd9c01cf7e992bb518afa538d925e3086162e26dad8d07ec41b08996d33b82c5a4df888c431e2311fc98ac3e694f204ab07","ssdeep":"384:8msid4SXM40xls6lRH2DPCv8fzlshyYvCzVda5Ce13QsJnxB2ZYcTwpBtS:fsidpXMVls6lRHMPCEzlshySCzVcseVu","tlshash":"46b24abc3163f5de1191a9a9801f541ffe6a0c3fa01ea0a1e37f9dc459a478c5132b76","first_seen":"2025-11-21T07:53:29.634957Z","last_seen":"2026-05-06T21:12:35.134575Z","times_seen":5,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/news/list","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/news/list HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6InFma0dcL0NJVElxemtLNXlaeGdWOUpBPT0iLCJ2YWx1ZSI6Im9JMFlTUG15alY5MFJXRkRlQTZZUndmNyt2a1l3WHJXWHR3T2xuUE1acUd1U3plQSt0TjVkeWltSkx6TE9ER1drYllmRjVFMWVsMnN6Zm5cL2FmRU90MDBzMGdDSU9HTjV1UWdYSkJ5UTNDakRxQ2tmY2RqaEJCNW1BMzZGUkliViIsIm1hYyI6IjkyMGU0ZTExNDJjY2MwNGMwZTg0ZDkyMTdiNDk5ZDhhZTE2N2YxMzVkMTNlOGFjOWY2MTZiZjg0YTRkNTI5OTUifQ%3D%3D; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1577,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1e982042d3d1d672ea2db108dedfc74","sha1":"b36cb2c9ca33b53fc62a6ef791f127ca1f078db8","sha256":"3b8a192bbc02b51da43e8f3f0d917dcf4a677d06a561bdbb2e43a4501b8085e7","sha512":"a25ccb001ee95c63e1527bc2830f9fc2e40bb30504d87f0560a2a1fb05815bdfae2e575f24543cb37d487b79775b36a77027d6427eea23a24f46198709ff01f6","ssdeep":"","tlshash":"2f3134f67e5069bf92c013c468cfaa9dedde2113c644ea5e0588ade991147f0001f077","first_seen":"2025-08-29T22:09:45.333161Z","last_seen":"2026-05-06T21:12:35.102958Z","times_seen":6,"resource_available":false,"data":null}},"time_used":933,"timings":{"blocked":325,"dns":1,"connect":160,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/news/list","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nContent-Length: 14\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=4\u0026lang=en"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6Im9OM3hxU09vc0RYRDRqdlZxa1F4dUE9PSIsInZhbHVlIjoib3dsSktoXC8zZnR5MURyU1FXejF5VllTUGZrcDJNbG5qVWYzKzN5Mkw4K0pnMHRcL0NENU51bGhXUnRyVmhJMHJZdzVESnB5VjV5cTZ1MGNudWg4SVJEZ2JoSW1lOUZEYXZNSXdaV1NPS0NhNlwvOGVieGdXSklMbXU5TFdTZFUyTzIiLCJtYWMiOiI1ZDIwMzNlMDc4MmM3ZGFiMWYzMDg1MmFkYjFlNTllMGI1ZDc3OWU0MGQ1MDVhMTAxODBiMmY5NmUxOTNkZmRlIn0%3D; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":796,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"81c5b9d49360402642edd0cac7e9978e","sha1":"31295425ebdb3e146eaa2703d8caf3fd1f66a679","sha256":"53e0e6c14317f17b2805015077a239ad3538b333190d21866940138835b749b3","sha512":"ef3f38e3da9d1c5c44f82c7f3882c4508c1bdf610b0e4758fedba8a1b546d47a679c92909326330012d73ba820b7f2a210b4dcc501b0dac25227a7bbdcf888bc","ssdeep":"","tlshash":"990126b53e006fbf62c423cd64cbba9aedde3013c608d65d448c98e982147b4102e077","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-05-06T21:12:35.106086Z","times_seen":39,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=BCH%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:35.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=BCH%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:35 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IlpEOWpVa0F4OXplV0ZsQmpPdGdvbWc9PSIsInZhbHVlIjoiSjhPd0Q0Rm5qSE9nQ09zMit4eU56OGlJNnRheldcL0p1ck1JXC9RNGFcL1JGQUh3XC9lUkJsYnpuRE5YcEFtSFJ1eTN4SlM4Z0Q5aTlRek15QmMyXC9TeGl6WEpUaDFjQmV3TmxkbnRjK3Z2RWhmeldBTTZ6UXlUTUFIWHZwOGptVEc4cCIsIm1hYyI6IjdkZWRiMzU1ZDBlODAwMDMxOTVlNjZiYmQ2MWFkOWRhMzUyZTBmNTEzMmMzZmJhYTQ1M2Y4MTFkMThkODQzOGUifQ%3D%3D; expires=Sat, 07-Feb-2026 19:27:35 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12502,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"86d624b01ab6deaa766c3f822e6ae776","sha1":"9adf6c6732b3a966a8aff1f0e43b40549dc63060","sha256":"4a95d641e68ec48aa0ab7f4431afdf95e4470e69c7b395ceee29535ceebae648","sha512":"448636ff486ccba1afa570ce092cb6e794843e236289a1aa53bf2173ba42dd7255091da153142cea32cd829f017708b601e7ff12c3ab3537bb6d073899563906","ssdeep":"96:vZpWZ7MZWGZUYSaZBE9NcZ5YuZwgT3ZAhqZSEOZosZGuZZMZ3DZzjnZ23ZvxZtCp:eLZkEJ52I/D2UNCrT7X5xf","tlshash":"dd428e4066f851f1c03ee1c07b92697d425e33b764d28eeb42bf44da84f1a7ab115a3b","first_seen":"2026-02-07T17:27:58.523171Z","last_seen":"2026-02-07T17:27:58.523171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/lh/deposit/config?lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/lh/deposit/config?lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T08:58:24.820635Z","times_seen":17670069,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":306,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/nav/nav-4.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/nav/nav-4.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:03:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d710a-49b\"\r\nexpires: Mon, 09 Mar 2026 17:27:30 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"3b9bd6a518d868bfdf6bc671def3327d","sha1":"0002af2d238c42d44f95ffdecc0ee1957ead1e8e","sha256":"ba5a50079d685b02f29d59f5f4d16331b8c29fa2aff5eed2ffb116d1dfe572b4","sha512":"a17dc0cecdae39b67412c192887ed80d8295ed87c71d29227b916b4f7a0aa9f382677d226091e185b3a503cc5f57140c38277191a84ac2135efd6eaa085c2ab8","ssdeep":"","tlshash":"f021d7efb1c21012c729e2be1c0e9779b62da302a7b8444225c5f892fd890c33354f4e","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.134903Z","times_seen":216,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-07T17:27:27.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 781\r\nlast-modified: Sat, 31 Jan 2026 03:00:17 GMT\r\netag: \"697d7041-30d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":781,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (500)","md5":"1366d84d144d035d910e5fb3bdd935d6","sha1":"be8f5e1cceefc44ac96f14d94d6c5e2573b67428","sha256":"4e5ed95200eacc0bf023bb0c1548de907755d010a08c0a55343df688d3181bd7","sha512":"83dca83f926ff22f26f8aa9ef14068b3fa6333fabc523cfd30f9ab5971d2316f5bdda35eb3831ef2c6ad0a7d48d46ef7c4b8c172faae146d1e35f7eceaaef095","ssdeep":"","tlshash":"0601b1c31c50f94d0720855164b6e61e89d649b5ae91d9603cdc6bec8be0b8ede7fc11","first_seen":"2026-02-07T17:27:58.529594Z","last_seen":"2026-02-07T17:27:58.529594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1408,"timings":{"blocked":617,"dns":263,"connect":173,"send":0,"wait":173,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/quotation_new?lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new?lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6InVYUStvUGg4U3BXUWRZdWtuMmQ0b3c9PSIsInZhbHVlIjoiTDQ2Mms5TGdCTnZzRUdpTWt1ZnJkT3czYVB0cXVkaWVYaG0reEh1czdqU1dMNWNhbEF1aENQSjZlY3JzQ2laaTUrODIycXJqY0paeWVvcGROQVhKVTJ0ZDdKeENWYlYyamkyUVwvUFMwckpXbnNhZ3luUERrd3ZcL1lYa2dTS2VxdSIsIm1hYyI6IjkwMGQyMjhmYTVhNmQxMzBjYWU5YjNmMGM4NDI1NjA0YTk3NzYyNWVlMWU0ODZlY2NkMjA2ZTdhNzg5ZDZlNzUifQ%3D%3D; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23844,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7655d03f1663f749c943a579f132a2a2","sha1":"0f201cf17d3aa897a333ded0baf9112d79649be0","sha256":"db0460aefc6fd2d38f0318f80b6b6358b7d5084c1e840c3becb526990d7eb0b6","sha512":"7b2d621bd53cd3cbd821261420a5e77e26413331ff3221265979e36f78e496435145daed8c3df6db9c6243a556d23ceca5211736450c78c3954e2f169b16eb29","ssdeep":"384:GcK87zz+jIWwmCVHno/sfN+TPcAdlalbm5Ynb6g:GcK87zyjIWwmCVHoEfN+TPljalbm5Yn9","tlshash":"93b2be9d322c8a78c3f69ec2de9e32ad3594b5079dc28f85d3dd9fc84284576e20b512","first_seen":"2026-02-07T17:27:58.531462Z","last_seen":"2026-02-07T17:27:58.531462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1074,"timings":{"blocked":338,"dns":1,"connect":175,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/news/list","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nContent-Length: 14\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=5\u0026lang=en"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IjhQdXBZSDZZNGFqMEdNXC93MUZsUjNRPT0iLCJ2YWx1ZSI6IlAyREpmOXZyOHIwNVZHVlRySUNqWnhhWCszeGFwalg0a1wvTGdUNU1Od0djaUVHUllFZUVQV1BTZU5Ea0t3Q0txZ0dSbzgxdVBZUWpBMndlT1R3Y1diVXZcL1wvbGVcL1oxK0syVHVcL09vZ3BTNGErNnkrd2xoNXowSFRvbmJWZlFqOFciLCJtYWMiOiJhYTkzNzYzZTNhZmNiNDEyMDRmYjMxODY3NTVhNzk1ZDMwMDM3NGQzNTQ2ODhlOGJhODU2YTAyMzUxZGU0YTJlIn0%3D; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c39fb00d1c1aacd979a3342432fd60f7","sha1":"21686d74a4ef4325da2b17a6d20df2df7713b73c","sha256":"8db7fb26955cb3fa4d0e5c629b7e8f5ad4de278a6978d74352167673065206e3","sha512":"a3ff68b903b51cad5ec12920139bf6799b770f6975a606e6ff59f8d3cc58f943647a36591b9b220108b707e005d2b47334c9eb939afccd6260ddcc0552d3900d","ssdeep":"","tlshash":"8bc02b5e11009cb7e75d632338467883dbdc60d01d4607914630401cc3bc8ac582346b","first_seen":"2023-09-17T07:51:12Z","last_seen":"2026-06-02T15:51:10.740567Z","times_seen":54,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/quotation_new?lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /api/currency/quotation_new?lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IjZESmFMRjdmYmRPMVNsSG5kamh4Qnc9PSIsInZhbHVlIjoiM0lXMXo1TW55VXF2S3c4SUhcL0pwejkweEFydnRiVkJDVEdCZHhUbFE2WXNhcmxlRWMzUjAyQW4zc3VjbnRtRDNYZjZnZ1JDd3pydlVcL2xsZHo2cklHQXJlRG1kYW9oMjFGZlJNQmRRaFcwMVZBV0N2cERETHF3MHk5cUZla1gxbiIsIm1hYyI6IjU0MmIxNGJjOGY4MWZhMjllMWYxODc3ZTY5YjFiNDYzNjM1OTUyNWM0YmNhMmMwYWI1ZDJiY2NmNTM1OTI1YjgifQ%3D%3D; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23844,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7655d03f1663f749c943a579f132a2a2","sha1":"0f201cf17d3aa897a333ded0baf9112d79649be0","sha256":"db0460aefc6fd2d38f0318f80b6b6358b7d5084c1e840c3becb526990d7eb0b6","sha512":"7b2d621bd53cd3cbd821261420a5e77e26413331ff3221265979e36f78e496435145daed8c3df6db9c6243a556d23ceca5211736450c78c3954e2f169b16eb29","ssdeep":"384:GcK87zz+jIWwmCVHno/sfN+TPcAdlalbm5Ynb6g:GcK87zyjIWwmCVHoEfN+TPljalbm5Yn9","tlshash":"93b2be9d322c8a78c3f69ec2de9e32ad3594b5079dc28f85d3dd9fc84284576e20b512","first_seen":"2026-02-07T17:27:58.531462Z","last_seen":"2026-02-07T17:27:58.531462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/news/list","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/news/list HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6ImdDVDh2c2xWSm5heU1PdUhoVEtpdGc9PSIsInZhbHVlIjoiMU5DMHp3eWdreVd4dlA2VzNwRnJoVGVyRjNEakM2ekVSUGk4d0M0UFAxdW9pSWowa0ZneFwvOXM0MWY4dU1YbUlaeUVzcjJFczlNNEJnZ2JDdGk0K2Q0TWVpcmZtbFcreFZLN1ZtdlhnbCtqcDZcL2VZbTZjSjRWclZvTXJSMXFTViIsIm1hYyI6IjI3OGRjODA1NWI5ZTdmNjYzOGEwMjFmZTdhMWExNjhjZmYxN2M1MTFiZjU2ZjRjZjJkZDg3NWNlOTI2MjUwYTIifQ%3D%3D; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1577,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1e982042d3d1d672ea2db108dedfc74","sha1":"b36cb2c9ca33b53fc62a6ef791f127ca1f078db8","sha256":"3b8a192bbc02b51da43e8f3f0d917dcf4a677d06a561bdbb2e43a4501b8085e7","sha512":"a25ccb001ee95c63e1527bc2830f9fc2e40bb30504d87f0560a2a1fb05815bdfae2e575f24543cb37d487b79775b36a77027d6427eea23a24f46198709ff01f6","ssdeep":"","tlshash":"2f3134f67e5069bf92c013c468cfaa9dedde2113c644ea5e0588ade991147f0001f077","first_seen":"2025-08-29T22:09:45.333161Z","last_seen":"2026-05-06T21:12:35.102958Z","times_seen":6,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":306,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=BTC%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=BTC%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IlI5WDVVMm91SzVRXC9jMHcyUU02RVZRPT0iLCJ2YWx1ZSI6IjQ2VVNyN1hWOGhaN2tyV21TTlpEU1VpZm5PUzlldUZcL29MbkNpS3pHYUtiWFFPcHp1dEpoNlwvVkhubmlHK0RmWHNRU3dOaktHbmZFWHliRHhcLzc1bFA5TUd0d2ZKQ2tLS0JwclE1SXo5MGdqNlYxa3QreHM1ZGZQb29ldGhIVG0rIiwibWFjIjoiOTIzZTVlZjFiOGFhNzM5YzdjYjA3YTBmOWM5ZTFmNTgxYTQxYjk3MDVkZTY4MGUxYTMxODUwMWVjODM1M2EyNiJ9; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14473,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d30dc433d04b67c6a4ef5bfd775a4781","sha1":"0d92e883d38dd81b9ca2cda6939f7956edfb0503","sha256":"6e1e669c394ebd7e7c94ff842b8b7182dd7d94eefcaa87dccacbc24baa692dcb","sha512":"d8c5d8aeff2e02db99c31d79da0bea5ca35337c3bfd9df58a55a26efbd6a1bb30896c24237205af6e82365457ea3b4369b64bb947191d71c00c975c271eb7585","ssdeep":"384:TNSi7u5gVIThwwPLVuTOzLi1VbYOR5gSWYcUroIAh+3YzJT1CrQ0jq:TNSi7u5gVIThwwPLVuTOzLsVbYOR5gSc","tlshash":"d652948073b91370d43a75c5aea24868429f937774c38ed642be08d3a5e1a7db216d3f","first_seen":"2026-02-07T17:27:58.519734Z","last_seen":"2026-02-07T17:27:58.519734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/pages-common-register~pages-copytrade-copy~pages-follow-index~pages-fund-fundTransfer~pages-fund-rec~2995ced8.0f1a084c.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/js/pages-common-register~pages-copytrade-copy~pages-follow-index~pages-fund-fundTransfer~pages-fund-rec~2995ced8.0f1a084c.js HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 31 Jan 2026 03:00:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d7063-1dcd1\"\r\nexpires: Sun, 08 Feb 2026 05:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122065,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65180), with no line terminators","md5":"9bf96588625c0cd9ede4608f56ab0f69","sha1":"2607f3a60443f495e38629c5208e642e773cebc2","sha256":"d9d1264f0dfd48bc6aa18dfdcf358b6ccbf31180259dae8a2b9b84ecd68ca76f","sha512":"29c7e99d5d66a20fb248a501529a086b6218311ac7827530a051c7a9640ece2ab1e0c46ae2ca94fa78c55b417cc5991f71e44e9e9a524b89be48381ee7a9294e","ssdeep":"768:a1EupOzKX0LFJz18WVM9XO1FxthjVvUg1/:a2FK2Tz+dO1Z","tlshash":"53c33bc2fdc860048d6bd705954636fe9e2ffb630255acdafe812f384e2a1d726055ac","first_seen":"2025-08-29T22:09:45.396768Z","last_seen":"2026-05-06T21:12:35.119432Z","times_seen":6,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/nav/nav-5.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/nav/nav-5.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 762\r\nlast-modified: Sat, 31 Jan 2026 03:03:39 GMT\r\netag: \"697d710b-2fa\"\r\nexpires: Mon, 09 Mar 2026 17:27:30 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"214aee318b1921c9d0a518e7236f6798","sha1":"80344471faf6fbd958fa82f20128e004b71845f3","sha256":"f4d884cc4ffdaeed56d30b53ce28453c401a187591cc6ed20700b98e5e9fcbd9","sha512":"f8316fa75057752ff636710dd30eca9b9c360bcfa1a28e1fd0659b4da48d530f13e81afb14f28a38f941f0aaca142b04afdbad0052a7621835c7904c3a10af5a","ssdeep":"","tlshash":"6601b54d4520e4699a3612a3b87ac2f10c1eb01462b79dde8532e31f3432704f0842c3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.119732Z","times_seen":261,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/icon/home-nav-6.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/icon/home-nav-6.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:02:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d70db-f69\"\r\nexpires: Mon, 09 Mar 2026 17:27:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"2d5b9a317f20174f750d5524ab61536b","sha1":"a17ac4797bb6584005694177000915727f98540b","sha256":"4fdd7d0112cc4d7c828747212b0eff8b681d07da84d3209a377ed54b67a37c1e","sha512":"9bfc4bc468a804a3bac5a9263161ee81036e7a41d11cdfab57911b8f3459d884e5591c5025146a5e1407d99584e6a53a3016085da7bac065825b709edfcb51d4","ssdeep":"","tlshash":"d0813a06fec178916a89d6c02fe911a64723a7c0ded0a1599ddec01b69b00b8c5df8cb","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.090633Z","times_seen":203,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/index.ee4f1ea6.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:28.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/js/index.ee4f1ea6.js HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 31 Jan 2026 03:00:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d705b-aa698\"\r\nexpires: Sun, 08 Feb 2026 05:27:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":698008,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42905), with no line terminators","md5":"37f86383a92142b730ee27c93ff9518b","sha1":"096866b11aaab0c6563023840553049598746970","sha256":"0ff06cce54a43e7dc3f85219b80660847abc24b79e6b35afa6a54d95c943e3a7","sha512":"c9e2f8be4dd935067b4918ab6c66de4cf53c10cbc9e94f362b107549e04de73c07a96e665a9b9a86f4c290465d27bd162da0ab2c67076cc4c0abb0e1e3749fb9","ssdeep":"12288:Dfbwe1LOfiEHo9uEODC8D3M+n/VAsdZDxiJRhLm0P89ewapKV9OnGEx0ZdwG1ZA/:WiPP8AKV9k0ZdwG1ZAIkKDJ3bys5XrHk","tlshash":"4de42ac7b4c1636852d73501909f736863bedd262546b8edf3c8ee54cb972892322b36","first_seen":"2026-02-07T17:27:58.551224Z","last_seen":"2026-02-07T17:27:58.551224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/news/list","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/news/list HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IjZZbVVqNk9rYWhjbzVWcTQzcEplWHc9PSIsInZhbHVlIjoiRVNoRmRKZENrNXp2aGtETGpvb3BJV2FhNjAxNmJXOTFtZWw0Tkkxb0l1VW1cLytWU1NseGdtdnM4TFl3WjYrZCt3Z0VIK3ZZeVFzc0Zta0w4TEY1Uys5ZFR3anp2b2ExRlBOTzVjZ2xhT3NLN3dISVwvaVdaZlM0R20zaXZhazJMbCIsIm1hYyI6IjEwZjlmNzFlMzNlM2U2MTJjM2QxZWYzOTExMjYxNzIwMzJmMDU0MWUxNzhiZjYzZGIxMmJhOGU0ZWQzZTJlMGIifQ%3D%3D; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1577,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1e982042d3d1d672ea2db108dedfc74","sha1":"b36cb2c9ca33b53fc62a6ef791f127ca1f078db8","sha256":"3b8a192bbc02b51da43e8f3f0d917dcf4a677d06a561bdbb2e43a4501b8085e7","sha512":"a25ccb001ee95c63e1527bc2830f9fc2e40bb30504d87f0560a2a1fb05815bdfae2e575f24543cb37d487b79775b36a77027d6427eea23a24f46198709ff01f6","ssdeep":"","tlshash":"2f3134f67e5069bf92c013c468cfaa9dedde2113c644ea5e0588ade991147f0001f077","first_seen":"2025-08-29T22:09:45.333161Z","last_seen":"2026-05-06T21:12:35.102958Z","times_seen":6,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":305,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/iconfont/iconfont.woff2","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/iconfont/iconfont.woff2 HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32744\r\nlast-modified: Sat, 31 Jan 2026 03:00:30 GMT\r\netag: \"697d704e-7fe8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32744, version 1.0","md5":"5b8f35b173333c5161098c675e902401","sha1":"c33837d28eff55458d49ef00e68ae9a04da46f05","sha256":"912327f77b1b2d3092e0cda25efdd0c5045ef17d018864d1cefba33db7727fce","sha512":"38a8b9a82c69376f1664e4e76f31605a6ad31e611e2f282c46a40044624072a48ed8f9fd49735136afbd21ba61cc9ac9795828e6fcb33ad4b662bd41cf6b4084","ssdeep":"768:9P1NcXcebJOUlU8WQKAfiDvCcj+IWL3OJ:9dNcXceNOUSD3AfmCcfJ","tlshash":"cee2f1303175ab40c3e6ef396e7b1c46d8724a3892785ee1e3d16e4d142bccd19d5a2b","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-30T03:09:33.167451Z","times_seen":447,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/icon/home-nav-2.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/icon/home-nav-2.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:02:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d70d7-17be\"\r\nexpires: Mon, 09 Mar 2026 17:27:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"8edb61a43ebbac5b1c00c183530722fe","sha1":"602712cb46dbce14c871f2ca1ebd29acf6136368","sha256":"b53157f804ec5e41faf0213dfcf9f05a00d55ec3390266848735d3e62275829c","sha512":"2edb5e4f1ac0068c4225b411d622a9c06162cfa2db87e6658df5b4cb14bc4670a6f64537d25471c27295a05549b89f9c3d5d688738591fd26989506019e6fb78","ssdeep":"96:MknmWIHF/KENGWGMHOzH5ogs4rpHggsBRC70n4wj7isQwtJDvv1Wm1VKUi8s528l:MknEj4+X2bsBsANjmsTDVnbfM5Gy3","tlshash":"cfc15c56d8b059751215e6592add30227f3603c08751ea84ecfedc7ab6600bd9dbcdc3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.100216Z","times_seen":245,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/DIN-Regular.ttf","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/DIN-Regular.ttf HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 24676\r\nlast-modified: Sat, 31 Jan 2026 03:00:21 GMT\r\netag: \"697d7045-6064\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24676,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"1e0b91dcb4ed262d0c603006919a1fd8","sha1":"aa0cecebc344f5a3bbd614ab97a42ff8f8637d46","sha256":"4749fb5068ba31c2cba31bf6c7340977fc21cf0e9339bdf155dd57457cfc9e0d","sha512":"dc5635a9a7a8f0b3b454de6c1cd56bd22d16310a18b874f153a38bdecaf41dad5eea2405f3e092d9040f9278d37cc5163dba32f3478f91d7a6a348f4ee708bd8","ssdeep":"384:9iJk3F9sakdL5E5P/y5QJ0FNpmuJqJgkJhBZ5JeJMz1vHJb90KILamCKwL/plOLz:9JmdlAn2/pm6cBpJX2sdX4","tlshash":"9db27c0957424b0fc7277e308e2642a2d725fcb427fa9bdb9d44d8f7606d2e34c68a45","first_seen":"2023-04-17T17:59:29Z","last_seen":"2026-07-28T18:14:35.974021Z","times_seen":545,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/news/list","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nContent-Length: 14\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=5\u0026lang=en"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6InoxNnQxZ1U1dWY0OXZETmRzOEg2TVE9PSIsInZhbHVlIjoiVFBhM0E1amU5eFdcL0o0Q2UzQm9ObDN0ZkQxeG1OT0h3RklPREFOd29TSVVrNk9SbEdiK285ZCt1emtkbllXamNYeUx4TU1rdkdQUkhEOTZsSE5Uc05SV0JmVDRlcCtWYUErTXozUlpIamZWWWxCU3VwVlAzRlMrYnpMM0s5QWhDIiwibWFjIjoiYTgxMTZiMmYyODQyOTdmY2JmYzEzZmE2N2EzYmYyZDIwZWRjZjcxYWM1OWIwNWM3MjE5ZjlhNzllMGE4ZmQyMCJ9; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c39fb00d1c1aacd979a3342432fd60f7","sha1":"21686d74a4ef4325da2b17a6d20df2df7713b73c","sha256":"8db7fb26955cb3fa4d0e5c629b7e8f5ad4de278a6978d74352167673065206e3","sha512":"a3ff68b903b51cad5ec12920139bf6799b770f6975a606e6ff59f8d3cc58f943647a36591b9b220108b707e005d2b47334c9eb939afccd6260ddcc0552d3900d","ssdeep":"","tlshash":"8bc02b5e11009cb7e75d632338467883dbdc60d01d4607914630401cc3bc8ac582346b","first_seen":"2023-09-17T07:51:12Z","last_seen":"2026-06-02T15:51:10.740567Z","times_seen":54,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/icon/home-nav-1.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/icon/home-nav-1.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:02:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d70d4-1b25\"\r\nexpires: Mon, 09 Mar 2026 17:27:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"e42448179a7e4cfd76149fc4e340c190","sha1":"8c9bf373b329b7cbabb770586167fadc13c34fb6","sha256":"aad8f325c9108c1b4b9a5f5fd40bc6ad910e12a81b6014d4586f6f8e8131da19","sha512":"265b4ef947931ddd88d013c03c50a6546989ef54312ed83bff4dffcbf03588ac5a37ec62e2dfd38760fe8c34a911f5b14973249c06f7a1e2d06522e92b4b4e17","ssdeep":"192:MknihKLD6GjZm0AqoXmXXTEHuh3O4nG5rg2c1sQgl:fnihKtjZm0AqoX05h3O2Wg2ADgl","tlshash":"d5e18e0d78d15ca04e635781ffcd90a30b535581fee0b8427ca6ae5bae702b1ca2d9d7","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.13049Z","times_seen":242,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/pages-common-about~pages-common-area~pages-common-article~pages-common-question~pages-common-registe~06bff5e5.6ab01489.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/js/pages-common-about~pages-common-area~pages-common-article~pages-common-question~pages-common-registe~06bff5e5.6ab01489.js HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 31 Jan 2026 03:00:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d705d-1ab18\"\r\nexpires: Sun, 08 Feb 2026 05:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109336,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65272), with no line terminators","md5":"3d2ef188e736cb38a708560d2e23505c","sha1":"ad4f0ff7a77fbeaf863644c262e86f808812a41a","sha256":"b1edb6feede8487a367837b69830609a4824b43e866694bd26ebf7dffbc7f954","sha512":"4dd21eb0143f830f9e2ee5af0f51a09fea437ee2e3e4292aafe98026ccf6c5101db12e0d72e66bd177801e95dec8f6a5ec678aed91fdcd8ce69bf79549afbf97","ssdeep":"768:fZrD5bY3YUgQnKb6QWm4AmCd0tG8e+W1MAbu7N8ChEAh8sd0Q2Z7wXH90tWNjZtC:fZrD5bg1sYId0FHoMqu7NdEAaM2O3OdX","tlshash":"69b3cdd2f6cc2840566fcf4e9341a3fcbbbaba2342697877e4622f244f772d62504558","first_seen":"2025-11-21T07:53:29.667508Z","last_seen":"2026-05-06T21:12:35.12529Z","times_seen":5,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/nav/nav-1-active.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/nav/nav-1-active.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:03:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d7104-700\"\r\nexpires: Mon, 09 Mar 2026 17:27:30 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1792,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 39 x 43, 8-bit/color RGBA, non-interlaced","md5":"6e2baf8ad92bb13eccce1b784be6f4de","sha1":"56195bc729f562359e7a5de5d0db813017971b68","sha256":"155295d2342170ff1b32d8bf029e9b1cd79ab884b6014fef2bc2990bf57cb44d","sha512":"ec2ecc8a420b474996700a8f7177985e1d512ede1d5fda6285ac995175c51899c90014654e5b440cfe83006d87d087f4783a729bf462be683b2936ec3ee504a5","ssdeep":"","tlshash":"39312bdb974664088db27c5113441d4c1f290b666ef7ae0c14c4f8cf31be0ca5624a38","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.136162Z","times_seen":254,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/icon/home_menu_9.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/icon/home_menu_9.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:02:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d70de-998\"\r\nexpires: Mon, 09 Mar 2026 17:27:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"b767ddb5d9d48cbf3a16744429b107ba","sha1":"ec45b215cb3bcac7d49ff9c0bf7b87ee276ded27","sha256":"cf7da5997340a4a86e040d73bfc38c7b29cab52ebd53d7fc631026ea36dbcc0e","sha512":"0c442269ea69b44e42cb1ed41563cd881235b12fc5ce64427f3106896f56c83d31618a31b125105fac0fd699df4c9c38b8447db2f31f9e8b7ab37e00746d1bdc","ssdeep":"","tlshash":"ac512caaa35de11d432b542b1a57d9049370bfdef1008fea0b68551d0497559b34394d","first_seen":"2025-08-29T22:09:45.329189Z","last_seen":"2026-05-06T21:12:35.109694Z","times_seen":6,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 08 Feb 2026 15:27:32 GMT\r\ncache-control: max-age=79200\r\nset-cookie: __uni__uid=rBEQUmmHdgRkX4NwA2GBAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-02T08:48:42.598325Z","times_seen":20105,"resource_available":false,"data":null}},"time_used":1300,"timings":{"blocked":532,"dns":1,"connect":234,"send":0,"wait":234,"receive":1,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/pages-index-index~pages-transaction-index.dfaccdd4.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/js/pages-index-index~pages-transaction-index.dfaccdd4.js HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 31 Jan 2026 03:01:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d7080-ee7e\"\r\nexpires: Sun, 08 Feb 2026 05:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61054,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60876), with no line terminators","md5":"674929a3f694256dc58c8fc168bb99c0","sha1":"8c3af778cac899a8628a9729737d5b171760d49a","sha256":"dbb5a572fbe32227c605183588b221a96d24ec1adbf782b84bd1a311f1870a2c","sha512":"dbefb3a0102ca45fca51b0b19a46021ed4b073f49fb84543e802767555d70fa2497a2b2fb9ab5512cc34c429c35942cb8f6f6ad1c2050f0e7042b3dcf5eb017f","ssdeep":"192:lyrHWXOGvc+/1fBjYbkoGu0tS2jwXFZmTlwt+TwftccWi16Yxz1gu8UG2/2e2g22:bQiE2j8FT+TwVccWi12Q5aIY2U+v","tlshash":"e553e7a2f7ec2006c567f743a56332f89a3bad7303016852da5d7f744e166ce2d825ac","first_seen":"2025-11-21T07:53:29.633421Z","last_seen":"2026-05-06T21:12:35.133065Z","times_seen":5,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/news/list","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nContent-Length: 14\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=4\u0026lang=en"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IlNLdUROb3p4cEVsbGJ2VmdYNFRJb2c9PSIsInZhbHVlIjoiRUZHYXB0Zk5jMWF6TllDaU4zbE9qMHRCRkVQR29IVWlyRTRVcGJIRFY4dXF5eFhvUkdXa3hNZlZrY21aUjdcL2JIY2cyQWVXcU1yVWg1TW5MVHIyc2QxVzJQeUlCTllIRkN6MkRSelVRM2hneDg0RmRwckdXQThBQ0wxc1UycE13IiwibWFjIjoiMDhjOTBkN2NmYjNmMjc5Zjk0OGViYzRmNzBkMmZkODNmOWI0ZTI4MmM3ZTM5NjRjZDEzOGQzMjliZjY1NzJmZCJ9; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":796,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"81c5b9d49360402642edd0cac7e9978e","sha1":"31295425ebdb3e146eaa2703d8caf3fd1f66a679","sha256":"53e0e6c14317f17b2805015077a239ad3538b333190d21866940138835b749b3","sha512":"ef3f38e3da9d1c5c44f82c7f3882c4508c1bdf610b0e4758fedba8a1b546d47a679c92909326330012d73ba820b7f2a210b4dcc501b0dac25227a7bbdcf888bc","ssdeep":"","tlshash":"990126b53e006fbf62c423cd64cbba9aedde3013c608d65d448c98e982147b4102e077","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-05-06T21:12:35.106086Z","times_seen":39,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/menu?lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /api/menu?lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6Imh3a1NFTjFTd1JwUHJKMWNcL3l4QUZBPT0iLCJ2YWx1ZSI6IkFBNDV0dk9CcUh6XC9WcFZ5cXRzRnlCa0txMzRpTmdPdXFPM3E0YTdCOXk1cUJCQzYwZkoxM21QazBFOXBFQXFYQVpnWlloR20zeHZDRlB2bHBrTVphRzRPZjhERmpNMmVuWDFqWkNFZ1lkeno5d1pQNTA2WU9mMUhXekJYVTdNMiIsIm1hYyI6IjhhYjI2ZmU0Y2M3MmM0ZGI0YmRiOGM3NmJiNTY5ZmZkOGMzYzU1ZWQ4MTA4M2Q3ZTkxNTI3YmI0MjQ4ZTZiNzQifQ%3D%3D; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1350,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6908c4278bf9d2f87a5385573520c65e","sha1":"795026956113e23c6ebd8804e9883885e57512b5","sha256":"2778319a25b169db36d3f833b26a9af1c05658d9b9ceda03f34278828a082757","sha512":"9146b0ffa970b1c35307b2b4e90e7757cf91e1297637d63626c59f720800f9f2bfb4435bf9289d3dd99afdfc3de7310b14e2ca62e70c3d25a00effdf05be8db1","ssdeep":"","tlshash":"4f217bec4efc2c2dd2fb21f168e3165e218a0507d8e4b59a17eeaddc03e818082db0c1","first_seen":"2025-08-29T22:09:45.325694Z","last_seen":"2026-05-06T21:12:35.104688Z","times_seen":6,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=LTC%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:33.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=LTC%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:33 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IkhGZHczMDlENTc1cmtuODNXSFVhc0E9PSIsInZhbHVlIjoiUjdDRTJwYzRnNURrcjZqNzFnVmFJdkYxdkVXUjhQK1VrUWhLSGdjVWtHWlRxUnZkWDhEd3lFRkxsYnZ2eSsyQmFOcksyRmhyUm95emR2U1hNUHFxa0k4SEJYUjVkOHFlWko1a3JiWXY0bHo1OHo4b0NGbWRXQ2MwV0ZZREYxRGQiLCJtYWMiOiI1MjJmM2FlY2Q4ODVmNjBmMzhkNTlmMThlNzhhZjZkOGE3YjRiNDM5MGNjNTBiNmU1NzY4YTZmZWQ5MDMxNzhjIn0%3D; expires=Sat, 07-Feb-2026 19:27:33 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12430,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99864796151ea9884808176683d8bdaf","sha1":"01efd34690b3401e8f6a286f7f2e2ea52b81f86f","sha256":"367b7699c6e3f45c26dab1f196e42d8d2da8b5d8638d2cbba781fb58dd345772","sha512":"1a8d0bc79320101752bf88f52b75277e90c60e967f446f8ed8534fc599173a0328edbd68e6b6af7997a304faab77d348113b2f12cd3330500aaf781a4317360a","ssdeep":"96:vBKJ/arBeJ3BWJVXB6Jv+BFJUcBzJJ0GWBFJfB4BCBroFBAdBDJ+mBkJ4BwJapBT:yaVzMPeL537jGhcmCTo","tlshash":"ae428c4456ad02f0d03e75c4eaa35868525e637725c3ceea41bf04d298f5a7bf202e3b","first_seen":"2026-02-07T17:27:58.570194Z","last_seen":"2026-02-07T17:27:58.570194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=EOS%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:34.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=EOS%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:34 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6InJzOHM2cnFaNDhrK2NWQzhVWEJabkE9PSIsInZhbHVlIjoiOGY4MEdaT1AwdklzcE93SkhPbUpNNlZpODBza1hmSDZIeGhlcXhrRVdJRkdHa1l1RlZRd3BzdFU4WGV1UWs4aUpiMkliXC94Z05pcTFzbkRnb3ZSVXB2MFhaOW5PTVNpdGk0S241a2ZLYW5NV2cwTmpQb0toUzhRVjJGOGdxdHFxIiwibWFjIjoiY2I2YjlmODU2MGM2NjA1MTI2ZTg5YzBjNGMyOGMzMDZhMzAyMTNlYWRjODFmZTU3OGVkNmNmMTJhMDQ4YjA0YiJ9; expires=Sat, 07-Feb-2026 19:27:34 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"136b02255a623f7c44544d5266e21ee6","sha1":"d16732370a4b4c9c029637920cd26afa2d422390","sha256":"fcca40d39e392ed1fed0515a2ed890128e3a461bc12240751cf2df7506160f86","sha512":"cc52574d8ea557037eccc98a0d0831b18956f9f6dc5d9c88dcb4b5a4a5abc88ba79470d35c772cc38bd8bc28159b911093b3375b72634bc6bea5ee8bc1c8e6c2","ssdeep":"","tlshash":"ba8000a2280e2c830c0a38cc880c8b8220e8a0808a200320ce8ea238cb080acb883830","first_seen":"2023-04-07T14:59:17Z","last_seen":"2026-07-23T15:53:23.475087Z","times_seen":219,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=YMT%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:34.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=YMT%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:34 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6InRJUHlITlY2Ump4czJaUkpxWURGUGc9PSIsInZhbHVlIjoiRHdxWUhUdkFWTVpvcmpjRXFGdmF1dzFsSmZRWWlYcXhDUm94UDVHRkpIZHJsQnljVU5jVTlWdkJSYzVsN3ZpTGlRaTg4OXF5TG83ZmVNcHFLVEFyTEVidUxcL296WDY4QnpEZUdnQ1JBcXBhRnFTK2tzRVlVMWdqSHZwZE5LZzE3IiwibWFjIjoiZjQzNGNhOTJhNTA1MTdlM2Q5ZmRmYTQyYjFjYTU1N2JhMzU0NDQ5YzA1N2RhZWM3MmZhNzM2OGUwM2RiMWNmYiJ9; expires=Sat, 07-Feb-2026 19:27:34 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15586,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0e2165ef3c825428ad97d62a3b3b47d5","sha1":"d94fbb4585fda42cdaa903ddff6b525a4110ee60","sha256":"268786cd77162f64f744042617853048798600d234a9b27de6fedbad077f53fb","sha512":"419edd9591b77aabb553a765e068d08c21869108ecfa05bb1bfb99f396a0a4e234e0e6752da39a95f22363f5c608039fa3e2f1bd8af21bbfa0b5dcb216d30e8d","ssdeep":"384:PLoYEFJ7iW2ueATOWlog4ugRARaRMReRyRERMReRyR9RERwpFo:PLoYEL7iW2xTWlog4ugqwSgEuSgEvKSY","tlshash":"0f62c04117a455b0d17a7ccc2a925de8922e61b728c34fda02bf0ac1d8e56b7b11f93f","first_seen":"2026-02-07T17:27:58.572001Z","last_seen":"2026-02-07T17:27:58.572001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/icon/home-nav-4.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/icon/home-nav-4.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:02:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d70d9-1c9e\"\r\nexpires: Mon, 09 Mar 2026 17:27:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 91, 8-bit/color RGBA, non-interlaced","md5":"51931449f7f1add2f1b23c1d3fb0c50d","sha1":"2472606e33ee28b6d1b24adaa15c2cc2e3f2e3a5","sha256":"115a31c73bb313b73626ce78e057499e508d55d8208315a1590c473dd47030a4","sha512":"2ee2fa2fdd8c200b57884f31fc1ef92115683646bec270d2736fde25ab5f1e5c952a66018efde827acffe759ae84198ccb39fb52a6b85047eecbd0947a7d30e2","ssdeep":"192:MknvFTRsSsJfpk4hEfHtdgcV73LJ6vRrhPnD:fnvFTRsSsBpfEfDlJe7nD","tlshash":"dee18e01ec61bc50a6258a85a4edd14b8f17d3d0ad9858ebbde5d55280d34f8576ccc3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.120633Z","times_seen":202,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/chunk-vendors.ebf55bb6.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:28.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/js/chunk-vendors.ebf55bb6.js HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 31 Jan 2026 03:00:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d705a-cb8ba\"\r\nexpires: Sun, 08 Feb 2026 05:27:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":833722,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44268)","md5":"e814fdd6bf1e8665e561db5dc8a7a063","sha1":"1dcad69cdd288f92e6f65a19d8884cf20450681e","sha256":"7334933ea8de881a6de5fb5daf64d54736f6ce0496dd50c7ca4326ebb8a7aff2","sha512":"23299feedd196b95cfc7ce79ecaeb921786b2a941aec9dc3d67253d8262e421b5475fb665b236c4e35af4442cde82e254f6320ac3cba92f6b6c6988fe8956eb7","ssdeep":"6144:f24CHdb0f+zWij1Z4fXtwTf3mTb/Cdxv+NTlrbEvm/dO+QhZxKvQzYKD/Ps2xdC:fGYicfdwTfBdh+tZ3OQvQzZP+","tlshash":"bf05f78df282b0b60be761b5403f220ba2376959b40ac4d4f675e4d4ad7894e2237f7d","first_seen":"2025-11-21T07:53:29.642123Z","last_seen":"2026-02-07T17:27:58.574502Z","times_seen":4,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/js/pages-index-index.89736d8d.js","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/js/pages-index-index.89736d8d.js HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 31 Jan 2026 03:01:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d707e-9301e\"\r\nexpires: Sun, 08 Feb 2026 05:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":602142,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65176), with no line terminators","md5":"4b50af0f530a5ee67ccb18036f97fa48","sha1":"a13a3476d79f54a43eb8a67827228f9c1599240b","sha256":"0992bea0402c4061c0bead7f6e7924a71cd6635a6fd48b59f46cb876039fc1be","sha512":"34319c04c3f03d541d4a250d3ca7ae1a0aaa98209edb06a7f85fe85ad79d5272029069df9628712482c47987ddc7ff45719715c79e962352c0429e28c421ca26","ssdeep":"6144:RQDxMIxR2uDjkRjr/9j4CPsrS02KGBsFMHy6hMGu:RQDxMID2uDjkV/9j4CKS02KGWee","tlshash":"90d4b7c6f2c821058277c311945f72fc9a3abd239205a851f5a5ffb15f16aca3729e2c","first_seen":"2025-11-21T07:53:29.649049Z","last_seen":"2026-02-07T17:27:58.576062Z","times_seen":4,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=ETH%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:32.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=ETH%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:32 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IlAxVVQxOGNJV0NlbTlXeisxUkxUNEE9PSIsInZhbHVlIjoib28wQ2lLNEd5VXI2U3lsd3o1bFdZUFoxNTE1M29cL1V1dDV0dUhOR21aODBkME5LU0hURkZWd3ladzhvRG56bjJNS3lwWkNXbVpvUnNXRWphU2dwWkJURzl4N283XC9DWmoyVzRIRnFrZTlqaE9YdytOVlwvVlwveGs2QkVyN2pSQXV1IiwibWFjIjoiY2Q5Nzg0ZTc0NmE5NzMyYTY3NjgxMjI0Zjg0NmYwMWMwNzU5YWY1ZTg1ODVmODVmMzJkMTg2ZTNkY2VjNTQ2NyJ9; expires=Sat, 07-Feb-2026 19:27:32 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13011,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4ee67d880a4d4705a68f9efe045006fd","sha1":"1328b22d7b9a05f04a2ce68025222377e8ec4c26","sha256":"461cf9db7ec3b98769c714105eb4a8ca23a2050d3e9a3f5a0f73ec0621746772","sha512":"f59b5be12ca95fe523ad35c47fc431330423103de9d337b2acfb4b4d177062679592e20e1a810db36be299b9399bde9d249b21dff9182b4e5540df8b9bdec22b","ssdeep":"384:yAS66OIhSLTQSMzwm/rrXz3MlRuATBPLCHwEE1xbVEwEf9+QhAJ8a9jWm9TWwSKE:yAS66OIhSLTQSMzwm/rrXz3MlRuAdPLo","tlshash":"e7426d405eb901bdc03aa8d8f6d65cac436f137b54c38fdb02be449295e2577b906a3b","first_seen":"2026-02-07T17:27:58.577425Z","last_seen":"2026-02-07T17:27:58.577425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=LTC%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:33.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=LTC%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:33 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6ImY4WldoaTlkNVBkc0N1blBsMUh6ekE9PSIsInZhbHVlIjoiUVY3bUEyRlpURWFUNkZJZGQ0ZFwvcTVXNnVWN2lqRTZkbDZPR3psK2dpU3MzaURNdlcwTDZBWW1RZzUweGFIQlpQSW45akZQWXJUcDZ5NmNWMzNMeGx5a0pIZlRoa2dmdXlmVG9qTExFTXlZQnE4TDZ5XC9PWDV2ejlrS0RqVkdXQiIsIm1hYyI6IjgyYmYwYzE3YTc4YTcxMzgxN2MzZjE5NmNjZjkyM2QzMmY3MTZjODcxMWE1MDI5MmE3OGE2OWYwYjljYTczMzYifQ%3D%3D; expires=Sat, 07-Feb-2026 19:27:33 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12430,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99864796151ea9884808176683d8bdaf","sha1":"01efd34690b3401e8f6a286f7f2e2ea52b81f86f","sha256":"367b7699c6e3f45c26dab1f196e42d8d2da8b5d8638d2cbba781fb58dd345772","sha512":"1a8d0bc79320101752bf88f52b75277e90c60e967f446f8ed8534fc599173a0328edbd68e6b6af7997a304faab77d348113b2f12cd3330500aaf781a4317360a","ssdeep":"96:vBKJ/arBeJ3BWJVXB6Jv+BFJUcBzJJ0GWBFJfB4BCBroFBAdBDJ+mBkJ4BwJapBT:yaVzMPeL537jGhcmCTo","tlshash":"ae428c4456ad02f0d03e75c4eaa35868525e637725c3ceea41bf04d298f5a7bf202e3b","first_seen":"2026-02-07T17:27:58.570194Z","last_seen":"2026-02-07T17:27:58.570194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/news/list","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nContent-Length: 14\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=4\u0026lang=en"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IjZJRFJ0VnJYbElzREszRUVTeFRPT3c9PSIsInZhbHVlIjoiY2s5UFZFd0xQM1NBWTJUcmpVTHM3TGlkWUJkVjFqa2NZYXE3Z2VQZXZzdWxpS1lpV1RnVnUzanB4NnJSbmFZZnVtajdNTWRrcHFhTWczWGg2c0FuRFErWjUzcU5MeEJpc2xES3FWOG4zQkJzc2F5MGpPMHY1aXNGZTlVM1J5Y1ciLCJtYWMiOiI3MDMwMDkyMGIzYmM3MjFjYzk5Y2QyOGNkOGUxYTY1MDA2ZWY1ZmI2N2QwNjI1MjE2ZWQxMTJiODdjMmZlMmU0In0%3D; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":796,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"81c5b9d49360402642edd0cac7e9978e","sha1":"31295425ebdb3e146eaa2703d8caf3fd1f66a679","sha256":"53e0e6c14317f17b2805015077a239ad3538b333190d21866940138835b749b3","sha512":"ef3f38e3da9d1c5c44f82c7f3882c4508c1bdf610b0e4758fedba8a1b546d47a679c92909326330012d73ba820b7f2a210b4dcc501b0dac25227a7bbdcf888bc","ssdeep":"","tlshash":"990126b53e006fbf62c423cd64cbba9aedde3013c608d65d448c98e982147b4102e077","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-05-06T21:12:35.106086Z","times_seen":39,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/menu?lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /api/menu?lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6Im1WdGpYNFFRVThmTVNsZlgrVWw1Wnc9PSIsInZhbHVlIjoiVmlOYjh4bnA2QkpXRGNNNWNcL2pHaHBZWVNiditMVVJEaW1TQndPRW5CQnVnSjdXSGNUSTU5ZUFtQmRsa3ZoNENFc1N4dXpcL1hSTGdXZ0IxUVR1dk5rSThObGxBUWRvdDVoZ3AxcmpYK05RXC9QVU1KdjR2bFRDVU43M0Z1UmRNeloiLCJtYWMiOiIxYzYwMTQ5MjI0ZjdjMzZjZDRhOWY2NWU3ZGYzYmUyMDE0M2IzOWMxMTNiN2Q4ZGM3MjllYjNkMzI5YjllMTgzIn0%3D; expires=Sat, 07-Feb-2026 19:27:31 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1350,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6908c4278bf9d2f87a5385573520c65e","sha1":"795026956113e23c6ebd8804e9883885e57512b5","sha256":"2778319a25b169db36d3f833b26a9af1c05658d9b9ceda03f34278828a082757","sha512":"9146b0ffa970b1c35307b2b4e90e7757cf91e1297637d63626c59f720800f9f2bfb4435bf9289d3dd99afdfc3de7310b14e2ca62e70c3d25a00effdf05be8db1","ssdeep":"","tlshash":"4f217bec4efc2c2dd2fb21f168e3165e218a0507d8e4b59a17eeaddc03e818082db0c1","first_seen":"2025-08-29T22:09:45.325694Z","last_seen":"2026-05-06T21:12:35.104688Z","times_seen":6,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/icon/home-nav-12.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/icon/home-nav-12.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:02:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d70d5-19c5\"\r\nexpires: Mon, 09 Mar 2026 17:27:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 87, 8-bit/color RGBA, non-interlaced","md5":"f65bbf6247b64ab0aa4d192730f5bc62","sha1":"58f64d34c30d0efbe91b2ecfd6cd1d1eedefb592","sha256":"11812f741ae3c78eb8840fb986f6b2b65c8f580d2db6be4d58d40d0567b12e1e","sha512":"f3ec7c165a0845bb40fb39f3d3acf66a3aa1e8258f6f892f76e71db09783dd04bf60db6905d6a6042c32e6e133f3013a70442fd114fbfcadb9c8ffa0ff9c274b","ssdeep":"96:xknmWIHh/TsyNGjmGg37HuH5/M1WVSX2RzBFe5qVqS+nISx/e1MCx5hyncMGyC+/:xkn27O5M1BGR9Fv1a//C9yncFyC+xwi","tlshash":"32d17e01ff6d0db84a9f59a046d9e16a1b310bd48fc134967ccdc5230e216f9ce1d5d6","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.095178Z","times_seen":72,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=XRP%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:32.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=XRP%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:32 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6InoyUEtwbVJyWDVDR3R2WXBtMHJNS2c9PSIsInZhbHVlIjoiQkg3K0lQMVdyazNrYlZhNEhNeW01dVpITXQyYk1WZUl1RFd0QkVnZnROOW51bDNGTGZLZ3NGWThJM0NtWG9OT2lFMlV6ODk1WlFcLzA0NFJkSHVGNjRPWkkyOGxFNVBjTFB4Q0o3dFwvSHVsR1pqaGNxVjBkc3RheGxUU09hTmw0NiIsIm1hYyI6ImZkMmE0MWFjOGY2ZmI2MmY0ZjZlYjc1YjY1MWRkODUzNzAyOWE0OGZkMmU1Mzg3N2ZlNDE2YzUxZDRmZmJkZDMifQ%3D%3D; expires=Sat, 07-Feb-2026 19:27:32 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13116,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b2cca807adc2de2e9600e5cb0ddf7480","sha1":"5eb616b3aa899ececd9e3f5eff27d6a2afdef144","sha256":"a4e6885ad37effe3d2150a3fb129fc5bd1cef430662b6b8eb0c249f5b406efbe","sha512":"275b365f279dd1e1e0b3fc5bc6af9f1e6adcef866baa0786d41bc132a730f65dcdcb61433c354b6c8dcca475e1556424ad5296c04c693f089badae1e5a93ad78","ssdeep":"96:vMf+MTqeM3x+MQT/MYvcMJUoMhUImMaOWMB2BMLXAM/UMAGMapMKyLMGmMfodMMw:VPajIq6qT9+Qti6EcAmQs8bbW/qQnL","tlshash":"00426c4742a90164c83a70d47ea349fc7e6e657760d38ea903be09d2b9e156af103d3f","first_seen":"2026-02-07T17:27:58.579083Z","last_seen":"2026-02-07T17:27:58.579083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=YMT%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:34.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=YMT%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:34 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6ImdISmxxcUZTaXM5bUpCQ0lYTUwrZFE9PSIsInZhbHVlIjoiU0VcL2kwVmlhTU94Qk9Pc0x0YnN2amRvSkZZZVVPQXBcL1wvXC8rN291NGlTWXhMeldoNHc5UWpIZzROc1crWkxLckRJMWF4K2l2elk5RFBWM2lLS2ZlS0hrTTFcLzRzV0JkSGZPZ1NwamNyZFNteEJyakUyWTROSUFxK0JGQ1dEWVpQViIsIm1hYyI6ImEwOTM0ZDkzZWQ2ODY1MTMxZWY4ZjJmNTkxMzBlZThhZjAxYThiNGM3OWJiZGU5ODU3YjhhOWE0NWNhMzMzMGYifQ%3D%3D; expires=Sat, 07-Feb-2026 19:27:34 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15586,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0e2165ef3c825428ad97d62a3b3b47d5","sha1":"d94fbb4585fda42cdaa903ddff6b525a4110ee60","sha256":"268786cd77162f64f744042617853048798600d234a9b27de6fedbad077f53fb","sha512":"419edd9591b77aabb553a765e068d08c21869108ecfa05bb1bfb99f396a0a4e234e0e6752da39a95f22363f5c608039fa3e2f1bd8af21bbfa0b5dcb216d30e8d","ssdeep":"384:PLoYEFJ7iW2ueATOWlog4ugRARaRMReRyRERMReRyR9RERwpFo:PLoYEL7iW2xTWlog4ugqwSgEuSgEvKSY","tlshash":"0f62c04117a455b0d17a7ccc2a925de8922e61b728c34fda02bf0ac1d8e56b7b11f93f","first_seen":"2026-02-07T17:27:58.572001Z","last_seen":"2026-02-07T17:27:58.572001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/index.ed4a2d2b.css","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:28.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/index.ed4a2d2b.css HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 31 Jan 2026 03:00:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d7047-1794e\"\r\nexpires: Sun, 08 Feb 2026 05:27:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2c05a28c7f2113821d909b7b5b918a3","sha1":"ccac94311f6ac6f580b64f47f7705318f1d226a3","sha256":"695bdbeea38a126c139158967cdd4f3a435e9936b9dff5b002e5f20a10fc7907","sha512":"3b96fbd1a89be8ae0b7479705cd4a2958ffe7f2f3f57ec23f407ad51ed8b447b9960728d77502e8fd8b2b19bf0971682030117559df250ea11c9bc1802364c3c","ssdeep":"1536:qlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:hApuK7hmVrS1Wu3iG41nrPI","tlshash":"4493f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-10-16T12:28:28.877032Z","last_seen":"2026-08-02T08:54:20.624337Z","times_seen":1785,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/icon/home-nav-3.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/icon/home-nav-3.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:02:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d70d8-f02\"\r\nexpires: Mon, 09 Mar 2026 17:27:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"af1e80bff113a7687e542d4fca416239","sha1":"83ce6e6d1881f6fa0d2a64873cde529d2fc14055","sha256":"dc41ff7881c27712a7a16d402346b6af5d3de0eda8b78b07a5a537df095393a0","sha512":"cce7ce1bf1894630112a56ba27699ea9a63c436e552cd4b5f052b7d8f40370a6833a37a4ac2ac34e776cf941d3337c831929b7c41be9fa436a1329e2858b57e2","ssdeep":"","tlshash":"29814c89f1c2a81121469c84eae6d1b72b3757e086e0e4a5dcdbc42bd8745fcc8de9d3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.094404Z","times_seen":203,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/icon/home-nav-9.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:31.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/icon/home-nav-9.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:02:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d70dd-1016\"\r\nexpires: Mon, 09 Mar 2026 17:27:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4118,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"96c006351f3bb1ed5a7236df6973d412","sha1":"21e63fd42a6940bbdf4caa8c84080df20716e4dd","sha256":"964df4170b2a82ff0a89d2f8cbd51da5c5ec91058609cf4b067413e182a90ee7","sha512":"fbff1d8e41b9d90a5de270acc44574c0f71acebd75991fc227c10082f4aec543e9c6206d36f9083f0f07405d287685e0448b0e378a37c3601f9dd7c5fca9e3f2","ssdeep":"96:PSTknmWIrD/+NGdGDHCnH5o+U3PfNdIhD1xHQbJDY0bIIzFiEtNg:PSTkn5HinO+UffuDHQBY0bfzUMg","tlshash":"5a815ecee4722e0b4ad9e3865ad562b7a7128b419f949402fccc8c473820479cdcd6e3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.135615Z","times_seen":97,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=ETH%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:32.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"OPTIONS /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=ETH%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://dexstream.net/\r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:32 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6ImpuVkJic3I4RzZtVE9LXC91S0Iwa3RBPT0iLCJ2YWx1ZSI6Ik9SU09JS1BpeHJCNEFJTDh6N3hvR1wvUVVyQk5QTUdvdUZwdVwvSzRuQ3NFdHhmbDJGYmNHODZpZkpNeFdVdUhhUUZQTGRMcU42R205Y1Q4NlA1ekRxenVLM2ZrNDlpY1dCRTh1cVFZbG1oNFphQXZkakpLektjVUVwc01ETkFsMU8iLCJtYWMiOiI4NzhlMjIxM2ZmMWE3MjAwY2Y3NmFkN2JhNTdjODE0ZmE0ZjZkNjA5OTgyNGZjNzU0ZTg5OWNlM2YxNGU0YjdlIn0%3D; expires=Sat, 07-Feb-2026 19:27:32 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13011,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4ee67d880a4d4705a68f9efe045006fd","sha1":"1328b22d7b9a05f04a2ce68025222377e8ec4c26","sha256":"461cf9db7ec3b98769c714105eb4a8ca23a2050d3e9a3f5a0f73ec0621746772","sha512":"f59b5be12ca95fe523ad35c47fc431330423103de9d337b2acfb4b4d177062679592e20e1a810db36be299b9399bde9d249b21dff9182b4e5540df8b9bdec22b","ssdeep":"384:yAS66OIhSLTQSMzwm/rrXz3MlRuATBPLCHwEE1xbVEwEf9+QhAJ8a9jWm9TWwSKE:yAS66OIhSLTQSMzwm/rrXz3MlRuAdPLo","tlshash":"e7426d405eb901bdc03aa8d8f6d65cac436f137b54c38fdb02be449295e2577b906a3b","first_seen":"2026-02-07T17:27:58.577425Z","last_seen":"2026-02-07T17:27:58.577425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ysblysbl1l5b.com/api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=XRP%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"www.ysblysbl1l5b.com","domain":"ysblysbl1l5b.com","tld":"com"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:33.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ysblysbl1l5b.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:53:27 GMT","end":"Sun, 03 May 2026 05:53:26 GMT"},"fingerprint":{"sha1":"02:75:77:5D:FB:B9:07:47:45:19:E2:6E:D9:84:00:CC:16:91:BD:C2","sha256":"35:5D:29:72:E9:BF:28:E0:C0:C6:E4:13:7E:AB:AC:9B:77:DD:8D:D4:04:1C:A4:C1:3A:80:7F:49:56:2F:A3:2E"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1770481650\u0026to=1770485250\u0026symbol=XRP%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: www.ysblysbl1l5b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nAuthorization: \r\nOrigin: https://dexstream.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Feb 2026 17:27:33 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6InhpXC85Z25oV3NhV1NudlFCekVyTTdRPT0iLCJ2YWx1ZSI6IkZWMkYxVGZlUXBrS2VvWkt2VXI0dHQxbk9oeFVXK01jdkRvcjlmclZGc3ZnejhmTjJsUlJDV1Y0VFwvRlZHQ2tzSmsyS0ltdWlyZ3RzckM1WXdYdUczUis1dXByNHdIMTR6QWNHRFwvbWROZmxYYVpcL2lhSUtyOE5veStpakxzTEtUIiwibWFjIjoiY2RlMzA1NTk5OTBhYjcxMzNhMzgwYTMzOThlNDg5ZDYxMzI1MWE0NjBjNTMxOTZjMzY3MTdjNWU0NDYyMDY2NyJ9; expires=Sat, 07-Feb-2026 19:27:33 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13116,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b2cca807adc2de2e9600e5cb0ddf7480","sha1":"5eb616b3aa899ececd9e3f5eff27d6a2afdef144","sha256":"a4e6885ad37effe3d2150a3fb129fc5bd1cef430662b6b8eb0c249f5b406efbe","sha512":"275b365f279dd1e1e0b3fc5bc6af9f1e6adcef866baa0786d41bc132a730f65dcdcb61433c354b6c8dcca475e1556424ad5296c04c693f089badae1e5a93ad78","ssdeep":"96:vMf+MTqeM3x+MQT/MYvcMJUoMhUImMaOWMB2BMLXAM/UMAGMapMKyLMGmMfodMMw:VPajIq6qT9+Qti6EcAmQs8bbW/qQnL","tlshash":"00426c4742a90164c83a70d47ea349fc7e6e657760d38ea903be09d2b9e156af103d3f","first_seen":"2026-02-07T17:27:58.579083Z","last_seen":"2026-02-07T17:27:58.579083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexstream.net/static/image/nav/nav-3.png","fqdn":"dexstream.net","domain":"dexstream.net","tld":"net"},"ip":{"addr":"34.102.28.219","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexstream.net/","date":"2026-02-07T17:27:30.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexstream.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 09:57:57 GMT","end":"Sun, 03 May 2026 09:57:56 GMT"},"fingerprint":{"sha1":"14:88:EC:BF:47:1A:DE:88:08:16:CB:53:81:42:85:75:ED:2C:65:B1","sha256":"37:9C:89:A7:74:2D:75:14:87:2C:57:C8:63:59:3D:35:49:10:87:C6:DD:E5:63:75:D4:10:7F:C6:8E:08:16:12"}}},"request":{"raw":"GET /static/image/nav/nav-3.png HTTP/1.1\r\nHost: dexstream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dexstream.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 17:27:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 03:03:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697d7108-4d0\"\r\nexpires: Mon, 09 Mar 2026 17:27:30 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 45, 8-bit/color RGBA, non-interlaced","md5":"fd57dd6dbb1f72619420449aafe1d852","sha1":"bb99e3ba6404a1c00482576775530a0bcbf1d254","sha256":"67989dd943d26961cb26b505d15c64cb24c3ed0aacb607d32ef5d864ec1af3ef","sha512":"dbf4768c4a3c8eb9b84cf98a6086eb518d4c6cd56b57848466b8eb600191eb08c4086f19de41e62d9566ea7ba0fdf857b405108649fce438320f6f8371539181","ssdeep":"","tlshash":"f821b4d98b6c15e3c8e40c8fc53cac1b822ab45a189e2f0a46b999a70453319cf5d280","first_seen":"2023-05-20T12:09:28Z","last_seen":"2026-07-27T14:50:18.09638Z","times_seen":256,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"dexstream.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}