{"report_id":"5b14e2a0-2ed4-4921-8c8c-f52b9606e7c3","version":6,"status":"done","tags":[],"date":"2025-10-12T14:47:25Z","url":{"schema":"http","addr":"eth-trade.shop/","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":0,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"final":{"url":{"schema":"https","addr":"eth-trade.shop/#/","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"title":"wallet"},"submit":{"url":{"schema":"http","addr":"eth-trade.shop/","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":0,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-16T14:47:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"eth-trade.shop","ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-12T13:12:20.306899Z","last_seen":"2025-10-12T13:12:20.306899Z","alert_count":96,"request_count":24,"received_data":1977083,"sent_data":11080,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fugui88888888.com","ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"domain_registered":"2025-03-12","domain_rank":0,"first_seen":"2025-07-27T05:46:14.596053Z","last_seen":"2025-10-12T13:12:20.805267Z","alert_count":0,"request_count":31,"received_data":211624,"sent_data":17329,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2025-10-06T00:55:46.90854Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"eth-trade.shop/","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-08-11T18:21:30.365964Z","times_seen":7171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/js/index.48cca336.js","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec11b14f9c278406258c084041be41f5","sha1":"066231d72b524210ec42132349ce373987044a33","sha256":"65e360f0f3074ad7e02db9ce4011dcc4adeab9207f4400cdbed7d39b4e2f5783","sha512":"80a8b6a4d9db6f237dfe3904c36e0295d21ccf69b65ad61cad340b84e80fe8ace3fccf29c38a77106e596bef04a8d35abe120921274f9a8eae1cdfe078e03ded","ssdeep":"6144:QOoIl4VVk8P9emBaVr/PiH7ImWJMCN5z58g5sROpPncKL:rLl4VVk8P9emBaVr/PiH8N+EzvsQxcKL","tlshash":"7a642b87b6cd165c5a465a03a05fb7fdb1b72c91b702f8c1c1982f206be479bc222d79","size":311883,"data":"","first_seen":"2025-08-27T08:42:24.710684Z","last_seen":"2025-10-31T14:28:29.419802Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/js/chunk-vendors.8a700faa.js","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"226d3dffa02f3cd587be366c3cbe2ec0","sha1":"f6e7ab3b8d7e88933800ab0bcdb1669907e4c6b3","sha256":"cdb79a04261b65ce0d0222306875308e0a6bc601fc2cc5dc6bbb46b5fd23dd9c","sha512":"e554481d8ce12091b9da2053444fcda89f3f58c3303e1f6f204daa30030616dc7f99a14586bfea0240e1f2748882b92f649b2756bb41d92832b07122acb84a59","ssdeep":"12288:05YrCI+pBmmTd3mFJAepUFE4qSuVdVAT5k/JcBrNqYWP9:05jfpBmmTgFJAtFjqSuVrs5EJiNqYW1","tlshash":"c4453ac97286b4a647d321f1403f220bb23a2e68680e9414f6a5e4d1bd79dad5337f7c","size":1178268,"data":"","first_seen":"2025-08-09T14:42:28.371132Z","last_seen":"2026-07-21T23:47:26.518762Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/js/pages-index-index.04255442.js","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"81088b543861aabfd23fbd6bc471d811","sha1":"e575e470d9223fc997839ab3a3ae7154dae0397d","sha256":"6ad579f6c0b7b37aef524647fa4cbd00efcac9351e3733617933074588fd9b8e","sha512":"00fc2196adbad5994bd01f3951899f2c5e028a4879bdccfe7f0533d646adfde1dfeee1692b4283bb20e54df508b1802e60afa41ca186e307e9a83f19b9727b99","ssdeep":"1536:phfilUrsA0XSJOmc5J7NsmOpSJOC4DX/RVGbKnMhfrnx:PKa+vNsVaJXrnx","tlshash":"02934c08f1cbb06f595b9564106f270580367ba9e0069b9cf776e2d48e9d68e3263f3c","size":92925,"data":"","first_seen":"2025-08-09T14:42:28.272006Z","last_seen":"2026-07-21T23:47:26.507414Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/js/pages-assets-deposit-charge~pages-assets-deposit-index~pages-assets-index~pages-assets-record~pages-~49d143e3.a3eb3550.js","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e4532eaf6ec77925af5e35fe0c5b1f4","sha1":"e052958f30300174f4f9a107c8c573814d24c53a","sha256":"1cd9f24e443cac084289413cd3f15772185c4645e4c50e6f7c863b28a9c14fe4","sha512":"7c835e80ffe254ba37c684ff468af84388bdecf61edcba24a7acfe5d1004e6172c524af82a6e4ab1cd5fe64aad9031929ef6deea957d5677583f55be8f25b63d","ssdeep":"1536:dHFBsYId0FHoMqu7NdEAaM2Ol51hwJX2RcJZHYpN7xCIx/+eJF4cL3nnisGQaOmw:dHjsp0NVr7fnaMj51hwJX2RcJZHYpN7n","tlshash":"b443fbe6e10c1cd17f7bcc8f6240235f6549ff62d9968dc8f126264c8de27a021a977a","size":55422,"data":"","first_seen":"2025-08-09T14:42:28.317135Z","last_seen":"2026-07-21T23:47:26.493842Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/js/pages-assets-index~pages-index-index~pages-trade-index.ee95be56.js","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec586f37e78f2b6305587bca4662db90","sha1":"dafed0a23631c9162aac4eb43ab6e75c2eeca3d9","sha256":"52cfbf50d9d1da07c45bed27bb7d8933cf0540cc41198db7e93d3d4aed52a73d","sha512":"390b9bf046fe625f68d7276ca3fd75f748dcebbd14d1d54ce8d11010d785eea08a8d8537d34d11e1b76d9bc9158f8a1c9db8ad20f6a527cc9aa3e83588808ca3","ssdeep":"384:JJ9yx2Hs8sURaHIPquJOwnWJAWG/3jShrGq0V:r9EqqKO9hGOhrGq0V","tlshash":"e662d768b0caf037168bd565205f3e04512b7e95c418bff4f376f1e40ee958d226ab1a","size":14884,"data":"","first_seen":"2025-08-09T14:42:28.357062Z","last_seen":"2026-07-21T23:47:26.502996Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"eth-trade.shop/static/img/mate.73d0d401.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/img/mate.73d0d401.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-dda0\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 689 x 362, 8-bit/color RGBA, non-interlaced","md5":"73d0d401b5d73d5da5d7285808761e89","sha1":"194d93fbf1d1d5110c4ed63a35986db00e01e5bd","sha256":"4692ac431357c2aa24cdea271181fbc9f91e3d6435c61ba11263823060703a7d","sha512":"20d30637847b67090fe62bd4b5cfb3a3344bf73cae2fbb0fecea0c2400caf4ffa0d377f5a69e07a2b2871904b948ea78cdd3f3f375f539d3611a7544677dfe21","ssdeep":"768:YU7zRyw/HZDcXzh71eGVt8zQhYTWiH7bU/Gb8DLidOmrwdI3bkV/j1paUCUE4r:t7zwyxE1eGVgOGd7bUHabrDwVHHCmr","tlshash":"cd43cf73c461157bc421c6bc98cdd613ce391cad2afe254652aafe21e3e64c8b047a89","first_seen":"2025-08-09T14:42:28.230512Z","last_seen":"2026-07-21T23:47:26.510279Z","times_seen":24,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/set/lang","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/set/lang HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\nallow: POST\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":true,"data":null}},"time_used":910,"timings":{"blocked":352,"dns":80,"connect":134,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/wallet/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:02.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"POST /api/wallet/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nContent-Length: 14\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:02 GMT\r\nset-cookie: angela_session=eyJpdiI6InZNOXFPOHRocVpIUmR3UWVUejZZYVE9PSIsInZhbHVlIjoiK3d4dGhjOUJTWmE5dFJGSWo4SXUzdXBVakc5RFQxaUxBNHdNUDVxUGpCYnlZYVdCd0U5YWxmbDlQZEZGdXlcL1BORFF6RUxCZmxrZmYrN3pIcTZIUkcrQjJ2bEdOXC9mT29YdkxJK3ZqZnp6VnZXa1wvNURhaENLMDVNeFZQamhhcFwvIiwibWFjIjoiODlhMjU0OTUwNTA0MjRmZTQxODYxZWFkMzM1YmQ1ZmM2ZTcwMjk0OTM3MDYzM2VhNmNkMjkwNTMzY2VkMmY2YyJ9; expires=Sun, 12-Oct-2025 16:47:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fe3bffb102b97026f6ed42b5c8a62545","sha1":"1e2d5c82ac55d1cdd8c5d3324680a65133756953","sha256":"f2c2ab6ee8c91f7399343220b8f214b11391ca69378eaafe6b58fd36565fdcdd","sha512":"b795e40bae4605fda3e97790dc96e4527e333f69d51d11b922f933a055f1b69ba061ba92e258ec7f4c7fbae1b1fd965f3d49134cee5b6523d6ed72206a1bd1c2","ssdeep":"","tlshash":"0b90024a01006c1413060052744820104a80145181c16116142d443c51a9c08278221a","first_seen":"2023-07-20T17:59:00Z","last_seen":"2026-07-21T23:47:26.51451Z","times_seen":150,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/news/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nContent-Length: 14\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:02 GMT\r\nset-cookie: angela_session=eyJpdiI6InRvRitrUVhBdVVtQmNENWNpWGltWUE9PSIsInZhbHVlIjoiU3YrbWlrZnI1QmVcL2tjaXlKK0RJS3BSMW5LK0xhRTRtSnk0WlJrMk9jdmltcU02WUQ1bkpvTUw1N1wvZ2NESytTeHBRR1pLTndpT2dSeWw1cWE5S1lsMUhnaGc1S0ZSaDl1MW9PS2VUSTVjWitcL0hVZjk5S1krSFwvbm82Q3diYjBNIiwibWFjIjoiOTVhNDNiMmJiNDkwNDI3ZTk2N2ZlNzhlZDc5ZDJmNmI1YjM4N2VhZjFkZWE5NGFiZmQyM2E2OGQ1ZTRhN2E1ZiJ9; expires=Sun, 12-Oct-2025 16:47:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bace47e4713844c973de88e19678c6e0","sha1":"570e51227d00a907a45f9f546ffb472fa5f0f7da","sha256":"42692ab1be49a1606270fb6a6e639cb4eb95db75580cd4645b64d8ed88b3073e","sha512":"461b0fc2193876a9e6cf68eb09d070c01736b653b92c47690ab586575fcbc894ce6e14a941aa224ab2602100c055516a006cd9444b582fa40b658211720e97f1","ssdeep":"","tlshash":"1ba0222020000cba8b0a22e2300b30a2888c20808f0383000ac0a00cc38c0ac2822a3f","first_seen":"2023-08-27T03:45:08Z","last_seen":"2026-07-21T23:47:26.500971Z","times_seen":139,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:03.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 12 Oct 2025 15:47:04 GMT\r\ncache-control: max-age=3600\r\nset-cookie: __uni__uid=rBEQUmjrv2gHt59uA47kAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-11T18:21:30.335676Z","times_seen":20199,"resource_available":false,"data":null}},"time_used":2049,"timings":{"blocked":891,"dns":32,"connect":518,"send":0,"wait":266,"receive":0,"ssl":340},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:11.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:11 GMT\r\nset-cookie: angela_session=eyJpdiI6IlNZazVTYUVtNUsxb29aRmdDWGUwamc9PSIsInZhbHVlIjoieTlzQUlmdVNXcmxOZjVEQ2hxY0Y5VmlTaElFSjFTSVwvazVscGFXQU8rMDl4MHlDdktRMmIzSDNxaDBEd2pOekRycEpCZzRpTkxXd3ZVd2NWWlc3WE1xMGUxZHo1ck50YVdMMnBYVjV0RjdHMll3ejF5SlNETWs0bmxFQUZ3cUFEIiwibWFjIjoiNDVmMzliMzgwMDI1ZTI3ZmU1MWE0MTA3NGRjMjU5NmFmMmRmNzNkNWI3ZjRkODBiMGI4Mjk2NTY2MmYyM2JiOSJ9; expires=Sun, 12-Oct-2025 16:47:11 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e9d2ae6c4b8952249c8ae292193e9574","sha1":"1a56f409888d70fd56c74a81f475f165ecf8c45b","sha256":"69af3dd3e989b2ea80c0b57809dd559ef4af649fdfff6ba5ffa8320fc3562704","sha512":"b68323169c00ba87e20ed426618af69dd0ba2fbcc6717d3d6d143946e693f68d64be7f9b88e27c5e94f0a776effc17032782cbd124c3f547fbd48b10612223d7","ssdeep":"192:1JACtDAksOCayANmQbHASmZAWA3mnjgA5mX6A5mrRAtb2SsDvAnm7Hx3AkgX6qAu:/ACtTCazbEAmjO0MOfHxa6es/W","tlshash":"5212b18d362c9abcd6b67ec1dadb369a3551700badc24f41c3ed5f88038557ba20b612","first_seen":"2025-10-12T14:47:30.324249Z","last_seen":"2025-10-12T14:47:30.324249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/fonts/DIN-Regular-2.cefc4e9f.otf","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/fonts/DIN-Regular-2.cefc4e9f.otf HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 20676\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\netag: \"689ca36e-50c4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20676,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"cefc4e9f0d6e7416521f230e0bd690cb","sha1":"503f919cbd521f8a417d82eb90c680874c2ed666","sha256":"a8ac9cfacec43dd23fe2dd61e2ca64f62e9635c47b43915a6f534e5993bc5cc2","sha512":"36e0a692e16f6940714dbe5d18dbbad48bed2215e6eef718e36f2e56f868799830bfcb4b175489561ce14821257864a842d3fabde69b95d5ca8d684410926e21","ssdeep":"384:siBLb1kb+bmaXoAdekq0dtjtI66/WbQVWmT7RfiSKHW:siBv6a3skq0tjtXUVxTcSd","tlshash":"0f928e5b9c941b08c5afb33302226244d6b0a8b893faf4d7dd4422fb34ad9575d7ca93","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.509561Z","times_seen":152,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/wallet/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:02.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/wallet/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\nallow: POST\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:02 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/favicon.ico","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:02.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:02 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"67d182c8-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-11T20:02:39.970943Z","times_seen":318616,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:04.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:04 GMT\r\nset-cookie: angela_session=eyJpdiI6IkYrbXFnY09IVW1RakgwMVdmRXFzZkE9PSIsInZhbHVlIjoiS2pFY09ZeENPRGJ6MTk3SldETDdqOThNN202ZGVqcUJoRExOdVpJNVJsV2ErenIra212QmUxR0dvOVwvaGU1NXcwVUk1bUdhSm1QZ3B1RnFvT2d5M1NxXC93YnN2UHRcL2d6WU1tTmlOMk5PQWxxWFQ1OEZjTEZ2MjlsTjhxQldLZ00iLCJtYWMiOiI5MWI4NjcxMDc3ZGM0OWFhNGE0ZTU5NjYxZmFjNzExMTY5YzJhMjUxNzA2YjBmNTVkMjQ2MWNhNTNkZjNiM2IwIn0%3D; expires=Sun, 12-Oct-2025 16:47:04 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f928ef4f1efe678fe098cd2f93dd5124","sha1":"84f5dfdcb05e5088befcf3d3316bcd5a2e464388","sha256":"3909ec6ea475025a79b43bd81ea518c88e11d2cc3039be7418a087a1cfca893b","sha512":"49000bfbdabe10292feb4ad174efc95a75582c18599d0d9edbc9356d73254a0ad98c27e76e6dd70478c120236e224c04f313639448bfb23f46728defe3203a4d","ssdeep":"192:1JACtDAks3ayANm9bHASmnWA3m2jgA5mX6A5mrRAtbRsDvAnm7HL3AkgX6qAkk6f:/ACtka6bizjO0kOfHLa663G2","tlshash":"4512a18d362d9a7cd6b67ec1dadb36aa3555300badc24f41c3ed1f8c038557ba20b602","first_seen":"2025-10-12T14:47:30.340376Z","last_seen":"2025-10-12T14:47:30.340376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:09.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:09 GMT\r\nset-cookie: angela_session=eyJpdiI6IjFvMFVsWnFjTkJKazlhbkNcL0xyc0p3PT0iLCJ2YWx1ZSI6ImhyVzliM3djNFVRdGZlTG80MVIxZ1E5dzVMUGx2bnJqdno5Y01OQ2xyUEpEQW9wWTZHRlwvaUVIRHRBMkZsY0lUTlBpQ2p4clhPb3NkWGJDeGQ4V3hFeDh5YnhnMTlyQjhVODdINTQxKytvc3YrdW5iQlwvTjc5ZWRncTBcL0thTTZOIiwibWFjIjoiZmQwODdkMjQ2YTZiN2FmMTViNWZlM2JhNDYxNDE1MzBmZjU1MDgxYzFmNmNmOThmOWQyYjFhZWE1NjRkZWU5YiJ9; expires=Sun, 12-Oct-2025 16:47:09 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fbd261d8b98c4d79d6bcb1d8bb00238","sha1":"29735089c1e6789442e05fc5e6b8efd0b47e8a9c","sha256":"9165f7a6f9ef9554d0bddaf5c2f683c01d4207ae736e3853164faa71e9f03496","sha512":"a4761c9e4bc7f94c437cc42d842a4e5f8b0e649271bea3d6cc81f22e72732fcc5e348cceaf57070b613fb561b1aa4ecca3675dbca20f24c5a7e42bfce1bbab41","ssdeep":"192:1JACtDAksBxayANmQbHASmMWA3mp+jgA5mX6A5mrRAtbfsDvAnm7HD3AkgX6qAkp:/ACtsazbF2+jO0GOfHDa61MuJI","tlshash":"9512b18d362d9a7cd6b27ec1dadb36aa3555700badc24f41c3ed5f8c038557ba20b602","first_seen":"2025-10-12T14:47:30.343599Z","last_seen":"2025-10-12T14:47:30.343599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:16.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:17 GMT\r\nset-cookie: angela_session=eyJpdiI6InNra3ptVm9PbzRqWGszdllKbXo5VVE9PSIsInZhbHVlIjoiajhQVWd0ZGRVZlwva3prcndGU05lWmI0d3l5UW1IbjRoem5MM2puQmdtZUI2RVU4cEFndDluSWJFR2t3VCtlUzI5WUJranY0STRHWDNsTXZSdW92VW5vT21vXC9uV2RcLzJ4Y0xBbXJIUWJwMXhoa2xJenRJN2ZENlBKYTc4XC95bUVvIiwibWFjIjoiZjgwMzM0NjA0MWYwZTFiZDcyZjA4Mzk3MGQwZTJhMGZmNjEzY2Q1MjY5ZmY4ZTVmMDdiZjQzMzUzZjcxOGUyMSJ9; expires=Sun, 12-Oct-2025 16:47:17 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28f18ac25938dee901a0de8c631ceba9","sha1":"250fb39f2941b68ba052fe3de101c40a5af434ed","sha256":"47ed12f8a28e499d24d27a9369a1890830e3da930262666630bb02874250e1a3","sha512":"d0708ad6b6d11e290eff8f44719e875635d8005383a959813424477fbefb227a786ebaecf87834da81001fad5a52146549e9f7144606ca5150f84c53b778dffc","ssdeep":"192:1JACtDAkseayANmAbHASm5WA3mfjgA5mX6A5mWRAtbDsDvAnm7Hg3AkgX6qAkkm5:/ACtBaPbQijOx2OfHga6/6bp","tlshash":"5312b28d362d9a7cd6b27ec1dadb36aa3555300badc24f41c3ed1f88038557ba20b612","first_seen":"2025-10-12T14:47:30.347108Z","last_seen":"2025-10-12T14:47:30.347108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/common/lm_2.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/lm_2.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-5a5\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced","md5":"06a43db0d552cb5a405ca74704a65705","sha1":"cc0890640d6c246c219ef4a93aedf0724a14f71c","sha256":"d857a8c315937da20836c04d2b4cedad4154c9e98726bd89ed00360ca9fd3fe4","sha512":"9bc8169a49a4fa5df08cbbb68af4dcd4372dfb6af0281c2d21e4f05c5a4c690f1cc7f8c148f0e36faead384049c910a36945fc3cc5ad3e2b695231d196ccfc44","ssdeep":"","tlshash":"8b3196dee94114c152ccad9311eb2023e5920c848eb5ba61f4cdd80b5e316f2016b9ef","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.505946Z","times_seen":132,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T14:46:59.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:46:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 781\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\netag: \"689ca36e-30d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":781,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (500)","md5":"9264c497014fadcf254fd21f38f15e26","sha1":"52977ad7866c6de42f45ffbdbac49da40d260681","sha256":"e48bebc6e8938cd6cbd3569f322909c8b75aa8cc51c1c27d78f26c78be677175","sha512":"450b5adb01f52a7ff3a383eed6437fd8ef97e3be746fd4409123b6cdcb8a6054318fa6d5482cd5ad3449029a2c274f825bd37b75d576ceb9e6a43e43293a6aca","ssdeep":"","tlshash":"2801f6c21c10e84d072086512477d11e89d649b46991c9503cdc6aec8be0b8dce7f811","first_seen":"2025-08-27T08:42:24.758997Z","last_seen":"2025-10-31T14:28:29.402932Z","times_seen":9,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":335,"dns":57,"connect":136,"send":0,"wait":135,"receive":0,"ssl":140},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/index.63b34199.css","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:00.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/index.63b34199.css HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-17884\"\r\nexpires: Mon, 13 Oct 2025 02:47:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96388,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"98c3f2478e126911070b7d39b60e33aa","sha1":"7876e4e482f948021e45fdf1ba6bfb507f747028","sha256":"0cbe21cbd48de683ef65476d5eef01398e97cd11130758352c99f9eb5b266da6","sha512":"b4f2c94f56dc4a90b3081a09c6a1e237f001c4164512833bf9cb187666e1d4ebefe5cf30e471b8c8f53d7b2f4a4d234819713cc629ae7a8a199d2e6fb20946db","ssdeep":"1536:blIApuK7hmVmb26S1Wu3xdyn37ehgnjhlvbc:qApuK7hmVwS1Wu3iy6njPI","tlshash":"7393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2023-04-05T10:02:29Z","last_seen":"2026-08-10T18:31:10.506982Z","times_seen":432,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/js/index.48cca336.js","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:00.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/js/index.48cca336.js HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-4c24b\"\r\nexpires: Mon, 13 Oct 2025 02:47:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311883,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64211), with no line terminators","md5":"6260d56406b440c47af73f2b3c0dad02","sha1":"bee71dad7ab2e162d53f2ed7a7ef5b6d4606aaab","sha256":"e5c013d6159c6796a63f5d055aaaf14bf5d88faa01facf14f502825b28c39f15","sha512":"6e1ea646d1cc87b0f48458f9799afb2384d5fb72da7d281854babead5e68ae53190394e4d8d0094584bd0931e61c10ebf6be9dd630890aad091bff482a1967f3","ssdeep":"6144:QOoIl4VVk8P9emBaum0FF2/vqude/5zVPa8g5sROpPncKL:rLl4VVk8P9emBaLKgRnsQxcKL","tlshash":"9274e847f6c4538c8ea239d1685fb3fab2775c909606ecdb43b8fb1037b82a581548b5","first_seen":"2025-10-12T14:47:30.362265Z","last_seen":"2025-10-12T14:47:30.362265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/js/pages-index-index.04255442.js","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/js/pages-index-index.04255442.js HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-16afd\"\r\nexpires: Mon, 13 Oct 2025 02:47:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92925,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65388), with no line terminators","md5":"81088b543861aabfd23fbd6bc471d811","sha1":"e575e470d9223fc997839ab3a3ae7154dae0397d","sha256":"6ad579f6c0b7b37aef524647fa4cbd00efcac9351e3733617933074588fd9b8e","sha512":"00fc2196adbad5994bd01f3951899f2c5e028a4879bdccfe7f0533d646adfde1dfeee1692b4283bb20e54df508b1802e60afa41ca186e307e9a83f19b9727b99","ssdeep":"1536:phfilUrsA0XSJOmc5J7NsmOpSJOC4DX/RVGbKnMhfrnx:PKa+vNsVaJXrnx","tlshash":"02934c08f1cbb06f595b9564106f270580367ba9e0069b9cf776e2d48e9d68e3263f3c","first_seen":"2025-08-09T14:42:28.272006Z","last_seen":"2026-07-21T23:47:26.507414Z","times_seen":14,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/tabbar/tabbar-trade-dark.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/tabbar/tabbar-trade-dark.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-6f7\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"924774de89f690148969766739d185fb","sha1":"695a4e9b8b3153d44cb80b41f0dbc6b260d584ed","sha256":"e3cffa48f57b5da551c2e0431279d16f59ad01702f974caaaa0ca641ce4257c5","sha512":"93212cbc0f0dafbd23973dabb6f2cc289a6ca2ee6ed520d333b300663900a812faa9afed7d2c49f340a6968a28fd0080790ff34cc25b78601f1e202f8c1327b2","ssdeep":"","tlshash":"a4310b9bf9907481dd95e99004f7b5265b394940c3c09218b4ef58232c712fe987e1df","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.499901Z","times_seen":132,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/common/icon_setting_dark.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/icon_setting_dark.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-656\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1622,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 32, 8-bit/color RGBA, non-interlaced","md5":"ca68cc399d60093b386e8d5fcb2b5ef6","sha1":"bc4ff334d8a40bb63cd00f8529f4ac4e77afb56b","sha256":"f34fc59e62595af51e0a5bea774ee3311b07d6b800350cb71a5227b74f75cb35","sha512":"1f662216011f9a38f2a64dab66d59cd28565f3d0d7eac78ada932aa7744708bc3a9b1b821b3b92168e529feb9d4b77515584ceb4cf955b447305280c96dbde4c","ssdeep":"","tlshash":"43310ac9b040a3c07a9ddae221ee001bdc738a82ddd2f53178fe50190d111b2504daff","first_seen":"2024-06-28T12:01:58Z","last_seen":"2026-07-21T23:47:26.495822Z","times_seen":85,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:04.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:04 GMT\r\nset-cookie: angela_session=eyJpdiI6IlFYa3NKRW5ReXcwQm55c3Q3N2cxTUE9PSIsInZhbHVlIjoiSm9rTzZJOE01YmNXVGE1YXJYZGZsNmVZZ094aFZibWk4ZXFyXC91S3BUUGpzcjRDdk5mT2ZPbk5mU1d5UVdPRDQzTlFVZFdPREhwK1wvK2NOR2tFYUVmRHJyVHc4NzUzZlVTUXFNUjdRZXY0bGE4YkQwS200M1U4dmhoUlozcFRpRiIsIm1hYyI6IjFkYjFiYzIyMjRmZjk4NzEwZDIyMzlmNWFjNTRmOWQ0Y2YwNzA3MGEyNThjMGJjZmQyZmQyM2RlZmJkOGU1YTcifQ%3D%3D; expires=Sun, 12-Oct-2025 16:47:04 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"62ab8f2d99d41f7827300f7824d2dca7","sha1":"e9349d287e067f5eec069fa30e2590940d89b8cf","sha256":"1756bb2edd16f022a367092882e2c8725647870124eda1ba392a1d51410381be","sha512":"58fe75f23896af802cd6a330f602d94f1aeb14e13bbae1f674a0937ea0f51c561c3744648706ece680299d4b55497fe644db023c76043845c9365509dc13fd55","ssdeep":"192:1JACtDAks1ayANmebHASmpWA3mqjgA5mX6A5mrRAtbksDvAnm7HD3AkgX6qAkkzZ:/ACt2a1bwDjO05OfHDa6zMH2","tlshash":"7812a08d362d9a78d6b27ec1dadb36aa3555700badc24f41c3ed1f8c038557ba20b602","first_seen":"2025-10-12T14:47:30.444335Z","last_seen":"2025-10-12T14:47:30.444335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/tabbar/tabbar-assets-dark.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/tabbar/tabbar-assets-dark.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-5bb\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"b290e229cb2c59172ddb91e298145bf0","sha1":"3ac1fcba57af7cb85a44ea8b19e902d5a474d830","sha256":"22a95652799432be65d87e0ab15ccfe4b557430fae9e90def9143931df807bce","sha512":"529b6228fd57a00a1e23a4954bac40e2657170b6e8440add96e9f05b1f541dca6332effd437fa4cc77ebdb6d6e9aadbf515acef3c5b82e70d91400f1983e3f8e","ssdeep":"","tlshash":"db31cc43fad07c801a48e9d713e540114e675d80e6d4edb6a4cabc66df710fb545c6cb","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.497473Z","times_seen":135,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/news/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/news/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\nallow: POST\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":true,"data":null}},"time_used":751,"timings":{"blocked":275,"dns":1,"connect":135,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/common/index_chongbi.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/index_chongbi.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-70b\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1803,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 49, 8-bit/color RGBA, non-interlaced","md5":"a036b37df2e76a5a790421bb35cce86f","sha1":"4e96453c63d7e7773ed2b40792ce5b076b1799d5","sha256":"ff05f0c4d865e5caedaa004bec00a522cda27c33f0c7c19853a9d0c6a9f68085","sha512":"24c5e79c60b494c03a822ab2a678e06a028e1d5dc97717503de79b8b0197e378b77e43af936ab88ec302362faeb240f89a5f3dcaf3e82ecdd74ec1ec881c282c","ssdeep":"","tlshash":"03310b65e951a1b2510ab56130f64413eda104c0fed06053eeabf01b2ca51fa3d351ca","first_seen":"2024-06-28T12:01:58Z","last_seen":"2026-07-21T23:47:26.498012Z","times_seen":85,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/lh/send/get_recommend","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/lh/send/get_recommend HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:02 GMT\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"216383716d804488f71f7837d92db335","sha1":"03caf07e94db10bd3fcd9357a229782d8d11781d","sha256":"94d3e19eef51b52f43d0695296c9622a2c507ebb696e5c130703a6f46437583f","sha512":"63c2f0245e090fd11dba5daad1b6e90a8fb1f8f0e817f67e37742bc4bfdaf57212424c48365042c83592a180c93ab0c999a95e8462b9f40209555de5f8959ffb","ssdeep":"","tlshash":"5c80040035145c1c470515c134443c40414d1143c04115110c44dd14c35d470313173d","first_seen":"2024-08-19T18:56:08.011824Z","last_seen":"2026-07-21T23:47:26.515588Z","times_seen":108,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:11.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:12 GMT\r\nset-cookie: angela_session=eyJpdiI6Ijd0TCt2ODZ6elwvQ0d4QnpHaFZjR2h3PT0iLCJ2YWx1ZSI6Ik9OWmdGWGRnamRleWpmNWExXC9lQzRnR1lDWXpGR1Ewa2dRdm9NYXVFNnA0bVF0bFlPYUlnaGQ0SEF1bjQ3d3JONUhsM3ZBVFhYSGY0XC9aZ004R2h1aStuTEpqSVJOZXd3aE1wVXVSQ1MyYWV2U2JjVjA4Z3ZJeFg2aWtWd3lvVjkiLCJtYWMiOiI2OTBiZTJlOGFmMDdhOTQ1ZjQ2MzdhYzBhYTFhMDE3OGQ1YzliMmJmMzU5MmUwNzhhNGE5YWM0MjJlZjIwZjM4In0%3D; expires=Sun, 12-Oct-2025 16:47:12 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e9d2ae6c4b8952249c8ae292193e9574","sha1":"1a56f409888d70fd56c74a81f475f165ecf8c45b","sha256":"69af3dd3e989b2ea80c0b57809dd559ef4af649fdfff6ba5ffa8320fc3562704","sha512":"b68323169c00ba87e20ed426618af69dd0ba2fbcc6717d3d6d143946e693f68d64be7f9b88e27c5e94f0a776effc17032782cbd124c3f547fbd48b10612223d7","ssdeep":"192:1JACtDAksOCayANmQbHASmZAWA3mnjgA5mX6A5mrRAtb2SsDvAnm7Hx3AkgX6qAu:/ACtTCazbEAmjO0MOfHxa6es/W","tlshash":"5212b18d362c9abcd6b67ec1dadb369a3551700badc24f41c3ed5f88038557ba20b612","first_seen":"2025-10-12T14:47:30.324249Z","last_seen":"2025-10-12T14:47:30.324249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:21.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:21 GMT\r\nset-cookie: angela_session=eyJpdiI6ImxFSExGKzJtU3cxanBFNVwvd0hqUjRnPT0iLCJ2YWx1ZSI6Im9ielR2K09iNUNcLzJPc0NtSVdCNGxJQ0s4dzdqNWRJV2IrZjFaUlA1dlZCUEF6c29rVThUeHR3eHNhd20wMW5XVzRcL1Zqd2xjbVk5UXdXRDZkVENPZGRNU3B5c0VTZnI3NVZzdEowQTNqY1lnbzhTOFwvdUR1TlBjamdwK2hcL2NBZSIsIm1hYyI6ImMyYWJjZTJlMzQ1Y2YwZjRhMmI5YTkwOWIzOTZhOGRkMDI4MTBiMjZhYWRjYzdiODhjNWY1YWI0N2YwNjY3MTIifQ%3D%3D; expires=Sun, 12-Oct-2025 16:47:21 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7cf9a2869e22f433064b552216bb660a","sha1":"6a108523bb8b69c01d468baccf9c7f8074fc2c75","sha256":"14a5da3401f75764a7259d191808d21bcf43830d9b4263b6ec050593b0ae6589","sha512":"389cac33500bb81d4738e1c58965d5d6edecd6df140883cbb11e5899c6b48a12700c52eea52bd41e94c94bd6ac832444cefecb8b75a7e4507efe47a4576151a4","ssdeep":"192:1JACtDAksZayANmZbHASmGWA3mejgA5mX6A5mWRAtb3sDvAnm7HC3AkgX6qAkkrh:/ACtiaibX/jOxuOfHCa6PD7hb","tlshash":"7012b24d362d9e78d6b67ec1dadb32aa3555700badc24f41c3ed1f8c038557ba20b512","first_seen":"2025-10-12T14:47:30.493195Z","last_seen":"2025-10-12T14:47:49.494151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"fugui88888888.com/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://eth-trade.shop\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: IfXKwUvaDH5X5VpSavePaA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Sun, 12 Oct 2025 14:47:02 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: c+PnI8eG+y8IEqK9ZeNv5HXqm+w=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":true,"data":null}},"time_used":1245,"timings":{"blocked":0,"dns":414,"connect":549,"send":0,"wait":139,"receive":0,"ssl":555},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/js/pages-assets-deposit-charge~pages-assets-deposit-index~pages-assets-index~pages-assets-record~pages-~49d143e3.a3eb3550.js","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/js/pages-assets-deposit-charge~pages-assets-deposit-index~pages-assets-index~pages-assets-record~pages-~49d143e3.a3eb3550.js HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-d87e\"\r\nexpires: Mon, 13 Oct 2025 02:47:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55306), with no line terminators","md5":"6e4532eaf6ec77925af5e35fe0c5b1f4","sha1":"e052958f30300174f4f9a107c8c573814d24c53a","sha256":"1cd9f24e443cac084289413cd3f15772185c4645e4c50e6f7c863b28a9c14fe4","sha512":"7c835e80ffe254ba37c684ff468af84388bdecf61edcba24a7acfe5d1004e6172c524af82a6e4ab1cd5fe64aad9031929ef6deea957d5677583f55be8f25b63d","ssdeep":"1536:dHFBsYId0FHoMqu7NdEAaM2Ol51hwJX2RcJZHYpN7xCIx/+eJF4cL3nnisGQaOmw:dHjsp0NVr7fnaMj51hwJX2RcJZHYpN7n","tlshash":"b443fbe6e10c1cd17f7bcc8f6240235f6549ff62d9968dc8f126264c8de27a021a977a","first_seen":"2025-08-09T14:42:28.317135Z","last_seen":"2026-07-21T23:47:26.493842Z","times_seen":14,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:07.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:07 GMT\r\nset-cookie: angela_session=eyJpdiI6IjBvMDhudXBJbVBwMHhuR1wvWDZXMDJBPT0iLCJ2YWx1ZSI6InpiNzFxSGxVN1JTRk5pUTAzK2Rsa1hRZ2tQbFIyd2VPb28rb1M2VHNQZjVYMlhyK05SeFJ3TEVUWWJMUks1cnhYdGlPOFk2NGJPcUNUcXlqSWpEWW5UR2NUOU9ieWk0MHQ4N2owY3NoSktmV3RMbkE5eXpIWjE3NWJrRTlZZERNIiwibWFjIjoiNjE4YjE5MTM5YzNlZGFmZTQ2MmQ3Nzc1YTc0MWY4YjBkNzFjMjBkMWFiOWE3YjgzYmI0NTFiNzk3YjRmMmVlOCJ9; expires=Sun, 12-Oct-2025 16:47:07 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"14c0cf90327526bd9a3f217b81c14946","sha1":"1647352fc564a2ce7b3b5bc7fa599d10dc3481cc","sha256":"b89fb96016add4b77b8cee30acc6e51b497d2fa3e46c05cba09d2d9a341f59c1","sha512":"c9aa2cba07c6f3697d17a990ed99932dbf6310f4610ecfbcedca0c3b2c907ea4c42d4fc217af1251b8d89b61346c047b798496df14d2149bfea1f7a2254eb727","ssdeep":"192:1JACtDAksZayANm4bHASmoWA3mRjgA5mX6A5mrRAtbasDvAnm7HD3AkgX6qAkkpZ:/ACtGaHbtMjO07OfHDa6pAzgv","tlshash":"9212a18d362d9a78d6b27ec1dadb769a3551700badc24f41c3ed5f8c038557ba20b602","first_seen":"2025-10-12T14:47:30.506457Z","last_seen":"2025-10-12T14:47:30.506457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/lh/send/get_recommend","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/lh/send/get_recommend HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/news/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nContent-Length: 14\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:02 GMT\r\nset-cookie: angela_session=eyJpdiI6ImFFYU9DSFNSXC8zXC95XC9ycnRkNjMxd1E9PSIsInZhbHVlIjoiY1NVUG5mUlBvSEhGMjNvNEpraWRQTGI1THRPdElLdEJRaUljNWtUeTJSTmU0eVoxN1ZXdlBvT2JKVXhwSU1ubys4SGpWSXhTVnRVSjJxUnpGN2VLUjhlckFRcFRsS1dJbjQ1N1FjOCszZlR4MStYZjl6SkZkcUNLNkNyekVCeXAiLCJtYWMiOiI3ZDkyNDUxZDYwY2JjN2IxNTJmN2EzZGUyZWJlYzE5NjI4ZDMyY2I0ZDg0MWIzZDRkZGMwOTMxMGM2MjBmYjY4In0%3D; expires=Sun, 12-Oct-2025 16:47:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":890,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"63d11c32c0a84e7d9f48ce68d63eaf73","sha1":"17e173ff2e8908f96aa9c2f7643cb56daaad5b7a","sha256":"aae6f79424314e4baa275d6956cb22754fd28444e43967ff24d4563bbc041874","sha512":"d7491364d065e2e45d1974654de90546c9f3ad83d9605a4daf7ff23bd61377d75d798767ef5e6fa3ce5720d219d520d8820c5f03aba27dfca72b95b6fb4e9272","ssdeep":"","tlshash":"3a1129fa2ec441bad59c12c10487f15c5a8e6223aea20e25e9c43dccce2d1f5a80f153","first_seen":"2025-06-29T22:07:49.332898Z","last_seen":"2026-07-21T23:47:26.494929Z","times_seen":26,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:16.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:16 GMT\r\nset-cookie: angela_session=eyJpdiI6InhtWnk1YjdrWktCRU5aOG9QOWZ1T0E9PSIsInZhbHVlIjoieUJSS0E2RDY1a3MyUFpKbHBOV3ZycGdqNzBJcmpjREV5WnhReHJmcDhkbXFiVVlOd1dxSnhhTEpXRWpUTW16cG5tNlVjUThCNXRUNFVrR1Q4Z3c0MjJPakJLdVBXbm1aRGgwTnpvQW9vRzlOSVVuTjdzUVlQb09nZFhNV285QTEiLCJtYWMiOiJlNzQ5NGM5YjkwY2FjZmUzZTU1NTQxZWYwODI0YWUzMTU0ZTg4ZGZkYTI5NDE2MTRlYWM1NzRmNmE4NGZiNzE2In0%3D; expires=Sun, 12-Oct-2025 16:47:16 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28f18ac25938dee901a0de8c631ceba9","sha1":"250fb39f2941b68ba052fe3de101c40a5af434ed","sha256":"47ed12f8a28e499d24d27a9369a1890830e3da930262666630bb02874250e1a3","sha512":"d0708ad6b6d11e290eff8f44719e875635d8005383a959813424477fbefb227a786ebaecf87834da81001fad5a52146549e9f7144606ca5150f84c53b778dffc","ssdeep":"192:1JACtDAkseayANmAbHASm5WA3mfjgA5mX6A5mWRAtbDsDvAnm7Hg3AkgX6qAkkm5:/ACtBaPbQijOx2OfHga6/6bp","tlshash":"5312b28d362d9a7cd6b27ec1dadb36aa3555300badc24f41c3ed1f88038557ba20b612","first_seen":"2025-10-12T14:47:30.347108Z","last_seen":"2025-10-12T14:47:30.347108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:14.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:14 GMT\r\nset-cookie: angela_session=eyJpdiI6IjNTcWpLbGRQaWY3dWVXZkxmMUl6c1E9PSIsInZhbHVlIjoiTm5pcmRwZ0VCMEZaRnNSRzMwUU94MXA2VGlWNnZPcmZ4ZVRXcjdYTDR6NUdhazdTMnc4dEFycllYYm9Bcmw1ditkNTFmK2F4K3F0VUVXdXAxM2ZWdFBrb0JuajMxZDZCWVdIZlwvNlAzVUZOVWlYUXRLXC9XYWJPaTRDYUpMNEFHeSIsIm1hYyI6ImE5OGQ3MzAyYmI3ZmVhOWE3NTFjMGEyNzJjNTU5NGZkZTViMzFhYmNhOTQ2ZDBhMmRhOGRhNGQ4N2M4YTg1OTQifQ%3D%3D; expires=Sun, 12-Oct-2025 16:47:14 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3dab2aa917ba306d7a79df2c3de71bd7","sha1":"0ccd969396ed29211428a16c583935807cd375f1","sha256":"0d43011c24b8876c9c1f3cc8ae033393f90c403e627e5317504f8723a8d6edcb","sha512":"f447e9735aaa9d94cae7cc0d2cf529453ecb0f138106b72dd9b9f92553793b8569a28f601914f54f88b08054be233aa5909d1e2d057d9a0df6fd2f1a77c495f0","ssdeep":"192:1JACtDAkszAayANmcbHASmA5WA3mpjgA5mX6A5mWRAtbUsDvAnm7HD3AkgX6qAkn:/ACtfaXbRwjOxJOfHDa6+6cR","tlshash":"7912b14d362d9e78d6b67ec1daeb369a3551700badc24f41c3ed5f8c038557ba20b602","first_seen":"2025-10-12T14:47:30.513794Z","last_seen":"2025-10-12T14:47:30.513794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:21.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:22 GMT\r\nset-cookie: angela_session=eyJpdiI6InQrOUtJa0p6bHNQTW9HcDN4UnVQRmc9PSIsInZhbHVlIjoiQTdZbW9KQUFPR0RNT1ZTelZocktZNlFyTEVMckJzaUJiemlRcXNISE1LK0QraThGcUJqa0thKytCNkNyWGVWNFNCaU1kUlpSRmpwYmRkMDJGdmxLMXdlWHdvMlNWcGRydFRMSzBiSzJiTE9ESVVQdEk0RFBabDk1dWpHdm9PcEYiLCJtYWMiOiIwOTY3YzE5ZjQ0OTY4ZjNkMjM3Y2NkMTY3MTQwYjFjMjhkOTYwZDkwNzNjNTM0NDVmM2ZjN2U0MzFhMzBiMzIwIn0%3D; expires=Sun, 12-Oct-2025 16:47:22 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7cf9a2869e22f433064b552216bb660a","sha1":"6a108523bb8b69c01d468baccf9c7f8074fc2c75","sha256":"14a5da3401f75764a7259d191808d21bcf43830d9b4263b6ec050593b0ae6589","sha512":"389cac33500bb81d4738e1c58965d5d6edecd6df140883cbb11e5899c6b48a12700c52eea52bd41e94c94bd6ac832444cefecb8b75a7e4507efe47a4576151a4","ssdeep":"192:1JACtDAksZayANmZbHASmGWA3mejgA5mX6A5mWRAtb3sDvAnm7HC3AkgX6qAkkrh:/ACtiaibX/jOxuOfHCa6PD7hb","tlshash":"7012b24d362d9e78d6b67ec1dadb32aa3555700badc24f41c3ed1f8c038557ba20b512","first_seen":"2025-10-12T14:47:30.493195Z","last_seen":"2025-10-12T14:47:49.494151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/img/net-user.ddf0d6e2.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/img/net-user.ddf0d6e2.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-abf2\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44018,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"ddf0d6e214245133a77a6d8cc56cbd7c","sha1":"9c58c947d231ea999441128113cea0388fea5308","sha256":"d845bcd61da04e154e9b6e84be2362a0e248154f838c4e099565de620dd6ddf2","sha512":"76918ecdb5f6a1a7525c4cf59aa547b862fcb37714f72b0ac9e124242a45187d00d7a6951e91b0fa49360eb6652dda207c5b01ca1e800a975538a3dd16017c38","ssdeep":"768:c98xtLZ1yChhZs6SJrdTI0UFMDbA1D88Yd4RObeD37jTGhT6AT+T+T+T+T+T+T+8:cgZRhC6OdcMABH137j6hTPIIIIIIIIIC","tlshash":"8d13c04adfa4794a0e309e137b478af007a6feea9711ee8f3464c1853c69096ad5d3c4","first_seen":"2025-08-09T14:42:28.354362Z","last_seen":"2026-07-21T23:47:26.501912Z","times_seen":15,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:02.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:02 GMT\r\nset-cookie: angela_session=eyJpdiI6Im8xVWdBUlJDQ2ZaaTNUY3NnOWVyWGc9PSIsInZhbHVlIjoiXC9Qa1B4OHY5WE1rNXFmQ2hXZmpySmZuZTZwRjRXNDBSNnhuTjZTQnhwY21rYVdheTVYVm1UUE4zSjRjdGlmVlJvbWhRUHl5a1hHem1jYlRxZ3BiY2hta0NrQ0JPWVE0bmljakt4Z1p5Mk1CN3JcL2VvTDdjcUd6MzdJdUhQdWhlTSIsIm1hYyI6IjQ4MDA3Yzk3M2E2M2JiOGU0NzUyZDRiNTBmOTBhZDYxYjM5M2UwNTVkNWNhYjc5MjM4NmE4MjdhYjE3YTg2OWEifQ%3D%3D; expires=Sun, 12-Oct-2025 16:47:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2eb65301ffb94df90edc90859da00f2","sha1":"4d9ae4ab876dd4413a1645203c65d3bfd793ad9d","sha256":"320011f6bb16b279d1eb6b03554c85253c01def7e80782a55a65922219f71666","sha512":"b2aba554e5004ab3b7605a0b9951962fd98934a0bf682866a27d60d7336d0bfa190ae2381775fc476bb1a0bdaba02e68d2842d8b330e4331cac8e42835bee55d","ssdeep":"192:1JACtDAksIayANmzbHASm0WA3mcjgA5mX6A5mfRAtbKsDvAnm7H83AkgX6qAkkp7:/ACtja8bZtjOIjOfH8a6peL2","tlshash":"b112a08d362c9a78d6b67ec1dadb36aa3555700badc24f41c3ed1f88038557be20b612","first_seen":"2025-10-12T14:47:30.521238Z","last_seen":"2025-10-12T14:47:30.521238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/common/lm_5.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/lm_5.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-615\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 29, 8-bit/color RGBA, non-interlaced","md5":"7045dfb26a5920ae530b250d26167e2e","sha1":"924eaa15ece9d75817c3008a9deb198871a85f38","sha256":"96e893a98d7c621f83902a037ebba8d22e3e8e920af91aae576dbfe60d2b9223","sha512":"b6e7fbe774e3e5ff27a5eb20f88b4e5d8e39df8886ae40f3567626621245b5109be59a886ddb25dd33ca938ddc5f09c904cda921d90a9a6c4584dbce5e14301b","ssdeep":"","tlshash":"df31d787fa40aaa11109ef4125f28522dd778c94f9d0be20d4d768570970afb8c1b7e7","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.498938Z","times_seen":121,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/tabbar/tabbar-option-dark.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/tabbar/tabbar-option-dark.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-646\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1606,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"aebdd7fcf282bc311c63aff7dfe05e8d","sha1":"5ce7c85bf972b2f6c3a72e60b8bf86d6810c33f3","sha256":"7213f978329cfcb949eeecb1f59a84f6f24ad6d88ee0de15a2ded298aeb9df09","sha512":"a28aaaa24352ba84b58ec7023b2790a5772530986413444a5ab2cc24071bdf69bb09dc089ad4b79a4cb8f7e75de9d2570cc648b3a392f07dacf847a0a0c7f4ee","ssdeep":"","tlshash":"6631c85bee58bc006689eac210f7352789228584df40e1b5a4e7c86d6db20fb040d6d7","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.487546Z","times_seen":135,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/news/list","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/news/list HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\nallow: POST\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":true,"data":null}},"time_used":734,"timings":{"blocked":172,"dns":77,"connect":136,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\nset-cookie: angela_session=eyJpdiI6InJTcmM2d3JuTVpWU3Y4anBoZWt1Ymc9PSIsInZhbHVlIjoia3JxRzY0d05NN09xRE1pOUZsVEo3bmtjdVR3ajI0bXo0MFhuRG1aSmpTN0pTTlI5cVpUenBsVTVkeWQyRDYxbFJIZ0N4dWhKZXBrNjlERTRDOEtcL21TZWE2TWVQZjkzdUhJVE9pMnNDQ1BoYlhNamhqWGtLdjluQ3NLQ3kxOWRmIiwibWFjIjoiZDQ4NWE4ZDI3ZjkyNjk0MmRkNjkxYWVjNTMyZDAyN2RhNjA4ZDczZjdkZmEwYmY5YTg2OTQxYzNkYWY3ZDhhZiJ9; expires=Sun, 12-Oct-2025 16:47:01 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2eb65301ffb94df90edc90859da00f2","sha1":"4d9ae4ab876dd4413a1645203c65d3bfd793ad9d","sha256":"320011f6bb16b279d1eb6b03554c85253c01def7e80782a55a65922219f71666","sha512":"b2aba554e5004ab3b7605a0b9951962fd98934a0bf682866a27d60d7336d0bfa190ae2381775fc476bb1a0bdaba02e68d2842d8b330e4331cac8e42835bee55d","ssdeep":"192:1JACtDAksIayANmzbHASm0WA3mcjgA5mX6A5mfRAtbKsDvAnm7H83AkgX6qAkkp7:/ACtja8bZtjOIjOfH8a6peL2","tlshash":"b112a08d362c9a78d6b67ec1dadb36aa3555700badc24f41c3ed1f88038557be20b612","first_seen":"2025-10-12T14:47:30.521238Z","last_seen":"2025-10-12T14:47:30.521238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":273,"dns":1,"connect":136,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\nset-cookie: angela_session=eyJpdiI6Im9NTUFVOW8wWkJ6cXhuaDdMU0l0UUE9PSIsInZhbHVlIjoiM08xclRHNkRvXC84OEEzQTAyYUFwN1BSazFVYWN3QmdJUSt0NkEwcmc1RHFVYjB6ejUrb2RoXC9Jb0Vnb215UHpzWEhRVmJxZWxhVWpDU0xWOVY4MDcxWHJ5ckx0ckxuc05wNFRoTlY0N0l2N1Y3cGJKbFlhYW5pMU5aZ2RKK3NabyIsIm1hYyI6ImIzODg5NDlkZWMwNTY1ZjkxMDBiNjlmZjIzZDdhMjY3MDEwODZmZTlmMWIyZTBhMGUwNGViZjE0MmE0Nzk1MTYifQ%3D%3D; expires=Sun, 12-Oct-2025 16:47:01 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2eb65301ffb94df90edc90859da00f2","sha1":"4d9ae4ab876dd4413a1645203c65d3bfd793ad9d","sha256":"320011f6bb16b279d1eb6b03554c85253c01def7e80782a55a65922219f71666","sha512":"b2aba554e5004ab3b7605a0b9951962fd98934a0bf682866a27d60d7336d0bfa190ae2381775fc476bb1a0bdaba02e68d2842d8b330e4331cac8e42835bee55d","ssdeep":"192:1JACtDAksIayANmzbHASm0WA3mcjgA5mX6A5mfRAtbKsDvAnm7H83AkgX6qAkkp7:/ACtja8bZtjOIjOfH8a6peL2","tlshash":"b112a08d362c9a78d6b67ec1dadb36aa3555700badc24f41c3ed1f88038557be20b612","first_seen":"2025-10-12T14:47:30.521238Z","last_seen":"2025-10-12T14:47:30.521238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":272,"dns":1,"connect":137,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/set/lang","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"POST /api/set/lang HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nContent-Length: 7\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:02 GMT\r\nset-cookie: angela_session=eyJpdiI6IjhkTTJPVWF1YlEyMTI1bUFJQ2c2eHc9PSIsInZhbHVlIjoiOVwvQTJvZmk0Mm5xUEZCRzh1QXZOM0NIUXQ0WUJCXC9IYVdkM3hMcUM5SnFCaG1zbVNSVTM2WDFMZ0VrSHhhcEFcL3ZrTnlUNUZnbFlrREFac0lDNWkxWjVVQ1M4cWRXYUJwUmxTdHJlMVp1VjFlQktkS2ZwVWUrNTNiRzV4eTV2ZFEiLCJtYWMiOiI0ZjQ3Yjc4NzQ4YmZjNmUxZDg2YjllNDI2MjFlZDdhNTgwZTA1YjI1MjUxYWI3OTBlMzNjNGNhMGRjZDNkZDAyIn0%3D; expires=Sun, 12-Oct-2025 16:47:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6446226916400e162f53aae1db0ff24e","sha1":"5ac1da1bd7081b18d0335c9b3f79444f391fa583","sha256":"066080ca4a07f0fca7bb7fa5b70e1db05622a5765567d7d8580d42e4383d0305","sha512":"e4d71b8c4412f2e14de1d0ab55fc4b53fb072efca14bf7e5c234522c9f5538b720069ec60250da43bfc549797b0917c046ba966d9e23dad80742f80b712121b1","ssdeep":"","tlshash":"6aa0121059248d2087025880708064014a0911388041350309c05068c3054102037b16","first_seen":"2025-10-12T14:47:30.53958Z","last_seen":"2025-10-12T14:47:30.53958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:19.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:19 GMT\r\nset-cookie: angela_session=eyJpdiI6IjNpMWE3eWdPbE1BdXhHMzRtR3FuVlE9PSIsInZhbHVlIjoiT2l2Zm9OVmpcL0U0QkdwaEpCUWY5b1wvSnNpRmRscFVXODRRUGZ2eVVLTnNIbkJmcU1IMk14a24zRzRjOE5LUW9abzVWMVVXNkpNM1VkZUxEdGNUcnpUWXpqTmF4RHRrZlVIYm55RzFpRVUzQktWNHh0OTNSSHd1bjBHS1FFdFRiTyIsIm1hYyI6ImViOTA1Y2YzMzhlYTdlOTk3ZGMwMjQ4ZDViOTBiZmVlN2VjNTc1MDNkM2U5MzI4ZmIxNjM0ZmE0ZWVmNmQ4YmEifQ%3D%3D; expires=Sun, 12-Oct-2025 16:47:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f340682a1fc26bc86b7b06240d53aa8a","sha1":"27ab3e59ef301b658e75687797e58b38039e91c9","sha256":"ccc6d6844c3fbf042cdf545b60f77f5b3c2289e32fe2db9c51b81678ec1034e6","sha512":"c4c119d3bd20bca02136923cb1616a5bbf43d2e4a6706aa0f771a712cd0643be1f06a1b92e2b982b9f0f5c54f891b0f067d292500f6d60fcfc153ce11e566088","ssdeep":"192:1JACtDAkseayANm/bHASmXWA3mejgA5mX6A5mWRAtbgsDvAnm7H+3AkgX6qAkkbS:/ACtBaMbC/jOxBOfH+a6b6Qo","tlshash":"fa12a18d362d9a78d6b67ec1dadb36aa3551300badc24f41c3ed5f8c038557ba20b612","first_seen":"2025-10-12T14:47:30.547751Z","last_seen":"2025-10-12T14:47:30.547751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:02.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:02 GMT\r\nset-cookie: angela_session=eyJpdiI6Ik83bkJiN0FYUk1ONTY2b0k1ZHoxeXc9PSIsInZhbHVlIjoicG5GMURTNnNNYTNITDZTeTRjZlU5aDBVUHZrenoxMkxHdUZ3Zm5XaFhCRHBJZm5jaDlkWUQxU1U1ekNqa0p0cTZLWDJGaklFTW51VklcL0RSVzJYaUhMK2tDT0ZCeEh1Q2V4T2N4Qis1aCs3OGxaZHAySnlXczI2MlNLaGRiZDJLIiwibWFjIjoiOTNkNDYzNjM0NTRiOThiZmY1YzRkYjA4YjE5MTFlZjk5NTJjMTAxYTYxMWEzZDQ5MzE3MDZkMThkMDhiZTM2MCJ9; expires=Sun, 12-Oct-2025 16:47:02 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2eb65301ffb94df90edc90859da00f2","sha1":"4d9ae4ab876dd4413a1645203c65d3bfd793ad9d","sha256":"320011f6bb16b279d1eb6b03554c85253c01def7e80782a55a65922219f71666","sha512":"b2aba554e5004ab3b7605a0b9951962fd98934a0bf682866a27d60d7336d0bfa190ae2381775fc476bb1a0bdaba02e68d2842d8b330e4331cac8e42835bee55d","ssdeep":"192:1JACtDAksIayANmzbHASm0WA3mcjgA5mX6A5mfRAtbKsDvAnm7H83AkgX6qAkkp7:/ACtja8bZtjOIjOfH8a6peL2","tlshash":"b112a08d362c9a78d6b67ec1dadb36aa3555700badc24f41c3ed1f88038557be20b612","first_seen":"2025-10-12T14:47:30.521238Z","last_seen":"2025-10-12T14:47:30.521238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/js/chunk-vendors.8a700faa.js","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:00.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/js/chunk-vendors.8a700faa.js HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-11faa4\"\r\nexpires: Mon, 13 Oct 2025 02:47:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1178276,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9839)","md5":"a7d966e1b942751c12784647900e86b7","sha1":"e4cbe1dffbba7e0ef5a5123c87c66ffaf4dfd27f","sha256":"84c980554cdc9b3d613a55f6360fd9f4f4e1319d9909f5a249e42c169b102643","sha512":"e696c02b067560ddfa60e53a3fd9e2e91b3a5954917f9cca88e182a316f4ba258533957a12079a4bc1e56c9cc78aac3debf4da83b80b723d720e9202344d9f74","ssdeep":"12288:05YrCI+pBmmTd3mFJAepUFE4qSuVdVAT5k/JcBrNB:05jfpBmmTgFJAtFjqSuVrs5EJiNB","tlshash":"7035398d7286b4a647d321f1003f220bb23a2e68680e9414f6a5e4d5bd79dad5337f7c","first_seen":"2025-08-09T14:42:28.063402Z","last_seen":"2026-07-21T23:47:26.511378Z","times_seen":13,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/common/index_tuiguang.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/index_tuiguang.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-874\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 49, 8-bit/color RGBA, non-interlaced","md5":"ec72242466c654d1f7e1c33aa6dd4db3","sha1":"2d7abeaf7a989b394238279dfd9cf5845b8c34be","sha256":"a5b43bc1c8e644e12442592679004d02a057b3d3214b6b41054162db7b78aa1b","sha512":"613ab9a5e3d8fc35db199406cdef18a0dc05ed38455b9befdb92a70b216468ab68da7989a146449ddf104a81684e19e87ed06cdd8e3e81bd846908d348c25842","ssdeep":"","tlshash":"e4411acef9518da71148be7261e9981b7f1b09407c11e2a72c87c0558a542b28c7efcf","first_seen":"2024-06-28T12:01:58Z","last_seen":"2026-07-21T23:47:26.486853Z","times_seen":72,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/common/lm_3.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/lm_3.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-631\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 29 x 26, 8-bit/color RGBA, non-interlaced","md5":"7e5274c84ee7d974cdba7500c76a1b2e","sha1":"4d0760d8ec261e132cec3dc399724d24e7d28a38","sha256":"79303baa446dcbd527ac1ff610fabd8f92c50daf5ff54bbe847ec90582cc5e44","sha512":"d0b462d43ad57f0e1ff22a4a50f12d2fea626cc840b38b18ab0b9c3700087e140b8c1515954f22ad9f50f0a3fa5ce3b8c8937c978ce60d396c65458a3db36581","ssdeep":"","tlshash":"1e31e7d8f623c481cacdb9e118fa8117b50b8c91669aa45d29cbc0291821af708748ef","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.513595Z","times_seen":131,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/common/lm_6.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/lm_6.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-6c7\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced","md5":"fb7c1ab1476b2b6be4d49a6cb35fb25b","sha1":"986fbfc4d865ce4e0043049603073670161ed6ed","sha256":"57d4a342ec3e59be5d2fad45490700adeccd84a0b3cb16c94f788dbe8b7718a2","sha512":"4ed1530275ce8eb6963dd15c89d38b443fdf4938282927e3dc4233296efa4cc53edde8ed364e457fb766a4e1e2b22dc419a694842a1a5294a05e98d5fa67d7af","ssdeep":"","tlshash":"e931850eb551ba4252ede68129f7417ada079c408bd4b0a174cfd06299223b4856b3cb","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.506477Z","times_seen":134,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/img/bg_dark.83a93ef2.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/img/bg_dark.83a93ef2.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-12c39\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 238, 8-bit/color RGBA, non-interlaced","md5":"83a93ef276bd4d559bd024bef0f84dd5","sha1":"1a2e3e4675b4fe09899f741b389f3fdb51c4bc40","sha256":"cbb3606ea77f33898c90df41f20bd06a1c4fb22898e22c26e9f34b8f3dc137f0","sha512":"70bb3a4aa3249bad4d1dc0ef0a374b55e676061ad16faa7b68154c45143d865cd9eb4bab5b5926f82dcdca25b234ce213e8e06a4434658cc4af803ff85d5eb5f","ssdeep":"1536:sm52a2JRQSf7ZjZ1I5CvKWZHU+0Gi/HtH0ahddb0+07IJQ0OXMUpOxhUERH:/2au1I5C7RU+0GiPl0aBot7IJCe","tlshash":"e97302552ee1fa4d2578d060b2c9cf3799062d2366e857a8f365c2970fe8e801491bce","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.504152Z","times_seen":123,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/common/index_tibi.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/common/index_tibi.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-6eb\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 47, 8-bit/color RGBA, non-interlaced","md5":"037e3bb5cee009df691f1b9e55462c8f","sha1":"6aeaa92b5eabb1ace1e2e8bce895ac3138a9e4e1","sha256":"ba1eb8c6d4d0a73f8d55093a38306f8cb1ee30f83eb7f65ce6a7a14172acc720","sha512":"9949037646a9e29451639c77f5f4ca9ed30746629af627422f1ec41c6cd5c7482540df7fb4ad098c6a13e64506e4bdcb867d679cd53b2d1f73bf3398a317afa2","ssdeep":"","tlshash":"6031e64ee801a882815ffd4124ea4153dd254500c8f2f2ba6deea450383a1f14e3ddc7","first_seen":"2024-06-28T12:01:58Z","last_seen":"2026-07-21T23:47:26.488371Z","times_seen":85,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:19.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:19 GMT\r\nset-cookie: angela_session=eyJpdiI6IkhxdFppd0NYdXpGNnFIUVlnUTN3Ync9PSIsInZhbHVlIjoiUFBLWkh6VjZXYjZ2OVZXZFZuTUtTcFwvWTE4MlpCY1lQUDNzZlZDSDdZUTlGY1daeVNhNkJHemRUbmszdFRvUmxcL2VEb2w1UmxnVnUxbkxKRG8zR1BUR0t3NkVvUHFndEpvcnpYcCtZV0hGRkN6WUxjSEk3NngrR1wvT3NQeFVqaXQiLCJtYWMiOiJhZjcxZWQ0YWY0MGZmZmZjNzlhMWFjMTFlZTdkMGU2NWNmMWRiOGFjYmMyOTM4ZGQ2YmNhYjdhMWIzMDU1NjRkIn0%3D; expires=Sun, 12-Oct-2025 16:47:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f340682a1fc26bc86b7b06240d53aa8a","sha1":"27ab3e59ef301b658e75687797e58b38039e91c9","sha256":"ccc6d6844c3fbf042cdf545b60f77f5b3c2289e32fe2db9c51b81678ec1034e6","sha512":"c4c119d3bd20bca02136923cb1616a5bbf43d2e4a6706aa0f771a712cd0643be1f06a1b92e2b982b9f0f5c54f891b0f067d292500f6d60fcfc153ce11e566088","ssdeep":"192:1JACtDAkseayANm/bHASmXWA3mejgA5mX6A5mWRAtbgsDvAnm7H+3AkgX6qAkkbS:/ACtBaMbC/jOxBOfH+a6b6Qo","tlshash":"fa12a18d362d9a78d6b67ec1dadb36aa3551300badc24f41c3ed5f8c038557ba20b612","first_seen":"2025-10-12T14:47:30.547751Z","last_seen":"2025-10-12T14:47:30.547751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:06.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:06 GMT\r\nset-cookie: angela_session=eyJpdiI6Im91YWVBRXIwemhuVm0xajNuTGFIc0E9PSIsInZhbHVlIjoiYU5XK3hiUlwvcWRvdFBjTE1zb2hqYUFnbHBvRWo5XC9kTTlUejJ3WjE5TnJSXC9OR2U0RjVWNjlYQlhqVTZVN2tta044S1FQSWpjSFc1cGUrUXljTVVnNWQ3TCs3cnArN09ndVwvdUpLeW1HKzE4ZHlOYUdJbVhlR3F0YlpVb0k3OEptIiwibWFjIjoiMjczZTEwNTBjYzBiZTllNmYzYTQwMWNlNjZmMjdkMjQ3YzE2YzAzYWVkZWNjMzRmNTdiNmI0ZjAwMDcyZDc3ZiJ9; expires=Sun, 12-Oct-2025 16:47:06 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"14c0cf90327526bd9a3f217b81c14946","sha1":"1647352fc564a2ce7b3b5bc7fa599d10dc3481cc","sha256":"b89fb96016add4b77b8cee30acc6e51b497d2fa3e46c05cba09d2d9a341f59c1","sha512":"c9aa2cba07c6f3697d17a990ed99932dbf6310f4610ecfbcedca0c3b2c907ea4c42d4fc217af1251b8d89b61346c047b798496df14d2149bfea1f7a2254eb727","ssdeep":"192:1JACtDAksZayANm4bHASmoWA3mRjgA5mX6A5mrRAtbasDvAnm7HD3AkgX6qAkkpZ:/ACtGaHbtMjO07OfHDa6pAzgv","tlshash":"9212a18d362d9a78d6b27ec1dadb769a3551700badc24f41c3ed5f8c038557ba20b602","first_seen":"2025-10-12T14:47:30.506457Z","last_seen":"2025-10-12T14:47:30.506457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:09.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded; charset=UTF-8\r\nlanguage-mark: \r\nAuthorization: \r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:09 GMT\r\nset-cookie: angela_session=eyJpdiI6IkR6YVZOcWlLM3NGOFVjMFc1NGsxa0E9PSIsInZhbHVlIjoiWVlnemQ5YmxzOEt5ckNpcXRRcWN0a1JIMkRqWWhmTGdObG9UczJHWEpJNVIzU2kwOGE3d0IzS05kczZtNW1XK3FjZEJwU3RQZEJNZU5rU3lVZFNvcTdOVkZqa1RTTU8xUHh0Qjk1cTRMUXVEM1wvdVNyZDQ5bnhiY3JIR0M3Y0dQIiwibWFjIjoiNzc3NTlmN2ExNDFjNDA3NTkwYWQ2Y2NmOTdiNjdhYTgxMjVhNWM2YTg0ZjM5Y2YzMjRlMmRiMmNkODNkYjIyMCJ9; expires=Sun, 12-Oct-2025 16:47:09 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fbd261d8b98c4d79d6bcb1d8bb00238","sha1":"29735089c1e6789442e05fc5e6b8efd0b47e8a9c","sha256":"9165f7a6f9ef9554d0bddaf5c2f683c01d4207ae736e3853164faa71e9f03496","sha512":"a4761c9e4bc7f94c437cc42d842a4e5f8b0e649271bea3d6cc81f22e72732fcc5e348cceaf57070b613fb561b1aa4ecca3675dbca20f24c5a7e42bfce1bbab41","ssdeep":"192:1JACtDAksBxayANmQbHASmMWA3mp+jgA5mX6A5mrRAtbfsDvAnm7HD3AkgX6qAkp:/ACtsazbF2+jO0GOfHDa61MuJI","tlshash":"9512b18d362d9a7cd6b27ec1dadb36aa3555700badc24f41c3ed5f8c038557ba20b602","first_seen":"2025-10-12T14:47:30.343599Z","last_seen":"2025-10-12T14:47:30.343599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fugui88888888.com/api/currency/quotation_new","fqdn":"fugui88888888.com","domain":"fugui88888888.com","tld":"com"},"ip":{"addr":"15.206.211.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:14.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fugui88888888.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 12:02:29 GMT","end":"Sun, 07 Dec 2025 12:02:28 GMT"},"fingerprint":{"sha1":"EC:9D:F6:4A:46:C6:54:55:EE:73:B2:1A:CF:43:F3:0E:21:F2:30:59","sha256":"EB:03:BB:CE:53:9C:D9:8A:70:14:00:9D:32:D6:EE:3F:02:13:F0:5F:BD:83:9B:85:78:33:95:E1:09:77:A5:37"}}},"request":{"raw":"OPTIONS /api/currency/quotation_new HTTP/1.1\r\nHost: fugui88888888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language-mark\r\nReferer: https://eth-trade.shop/\r\nOrigin: https://eth-trade.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT\r\naccess-control-allow-headers: *\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Oct 2025 14:47:14 GMT\r\nset-cookie: angela_session=eyJpdiI6Ikd3SFAzNnR2TVRwXC9uclV1TEFzNmFRPT0iLCJ2YWx1ZSI6Imk2ZjYzODVrRjJwWVI0ZVZBUFhHRmRlSVlWalo4NEUxakwwSjByU29vZFRCWlg2c3g0cU5Ia0ZBTEtiUkk0WkgraG1YMzZBVkN2bW5NZVJEZ29QS212TGd6YngrQ3lJSUtZbE9vSmtQRWNtekdUT0ZLb2psSVFOejBLNmhRVlR2IiwibWFjIjoiNzYxZDBiNjU5ZGMwZGM3YmNjOTkzZjU5NTlmZmNjOGI1ZGRmYTFhODA1NzAxYjhlMTQ4ZWU4MmI3YmVlNDA0NCJ9; expires=Sun, 12-Oct-2025 16:47:14 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9372,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6265ed9f638daa1d59a11e36a2db50ea","sha1":"2ed76c617a11889e7ead4d7c3b1c1c99a5f5d0aa","sha256":"4ba71b3db53dd023193e44fe47cde1658d62e37477a46667335958e8f787fdd3","sha512":"382db8d919b9911fe584abddf478b895e9ce9d443c6b000ac2988fe1563127516f2ecfe1a9767b2a604e83a0a05b293f81fdd617811ce2a59a4018c4df4d7800","ssdeep":"192:1JACtDAksMayANmTbHASmfWA3mNjgA5mX6A5mWRAtb7sDvAnm7HD3AkgX6qAkkzM:/ACtra0biUjOxmOfHDa6zRcR","tlshash":"5612a04d362d9abcd6b27ec1dadb36aa3551300badc24f41c3ed5f88038557ba20b612","first_seen":"2025-10-12T14:47:30.577243Z","last_seen":"2025-10-12T14:47:30.577243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/js/pages-assets-index~pages-index-index~pages-trade-index.ee95be56.js","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/js/pages-assets-index~pages-index-index~pages-trade-index.ee95be56.js HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-3a24\"\r\nexpires: Mon, 13 Oct 2025 02:47:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14884,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14824), with no line terminators","md5":"ec586f37e78f2b6305587bca4662db90","sha1":"dafed0a23631c9162aac4eb43ab6e75c2eeca3d9","sha256":"52cfbf50d9d1da07c45bed27bb7d8933cf0540cc41198db7e93d3d4aed52a73d","sha512":"390b9bf046fe625f68d7276ca3fd75f748dcebbd14d1d54ce8d11010d785eea08a8d8537d34d11e1b76d9bc9158f8a1c9db8ad20f6a527cc9aa3e83588808ca3","ssdeep":"384:JJ9yx2Hs8sURaHIPquJOwnWJAWG/3jShrGq0V:r9EqqKO9hGOhrGq0V","tlshash":"e662d768b0caf037168bd565205f3e04512b7e95c418bff4f376f1e40ee958d226ab1a","first_seen":"2025-08-09T14:42:28.357062Z","last_seen":"2026-07-21T23:47:26.502996Z","times_seen":14,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-trade.shop/static/images/tabbar/tabbar-home-select-dark.png","fqdn":"eth-trade.shop","domain":"eth-trade.shop","tld":"shop"},"ip":{"addr":"52.66.212.1","port":443,"asn":16509,"as":"AMAZON-02","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-trade.shop/","date":"2025-10-12T14:47:01.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-meta.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 12:23:19 GMT","end":"Tue, 14 Oct 2025 12:23:18 GMT"},"fingerprint":{"sha1":"38:D6:5A:FC:34:2B:1C:B0:C8:6A:F8:BA:23:50:A5:E2:11:DD:E1:D2","sha256":"7F:D9:6B:9A:D7:13:C7:57:A2:9F:DA:9F:3C:C8:04:59:2A:F1:35:32:7B:21:37:39:23:BE:48:DD:22:2A:18:78"}}},"request":{"raw":"GET /static/images/tabbar/tabbar-home-select-dark.png HTTP/1.1\r\nHost: eth-trade.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-trade.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 14:47:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 14:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ca36e-5b9\"\r\nexpires: Tue, 11 Nov 2025 14:47:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"934544b5d0cce80e22dbeb07a7cae8d7","sha1":"0ee7dc6f66b4befdb85de689f1d0f1f40884097e","sha256":"48566e7b6ae1c9bf20babc74aa88b7c0798b7463a3f034c59cc2a7b8b47036b6","sha512":"60daa0831b4c111f2f187fb12ba71b88a8f296ddccf0cbcbaaf9e9119231e9980a5596190877887ddb586de0c204e87bac3e3280d6ae55ea945cc4bb3c35d9d4","ssdeep":"","tlshash":"4831c9ccf60539020749d2c100f75527cf568e81cbe4b3daa9c984ea48201f8961e6cf","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-07-21T23:47:26.490888Z","times_seen":132,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-12","alert":"Phishing - Crypto/Wallet","trigger":"eth-trade.shop","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"eth-trade.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}