{"report_id":"5d5d46f6-824c-4324-95cd-99c2d32c5381","version":6,"status":"done","tags":[],"date":"2025-11-24T08:11:40Z","url":{"schema":"https","addr":"batonex-login-exchange.com/","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"batonex-login-exchange.com/","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"title":"Batonex Login \u0026 Batonex Cryptocurrency Exchange | Batonex Login Trading Platform","dom":{"size":21740,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (533)","md5":"4cda1838ad5f2948187641e159b929a2","sha1":"07c0b113bb3661790057ca745c256f3618b40d47","sha256":"6620e1c3a0c89445396383481e6660a6f6af290f299e4d5bc3f4ef7c1d7f307f","sha512":"1421495f1965fed37233030e16168c8d26459a488e63f1f64088f7796fa23d9b57244bf1acff4e0dbf8941576041fcf089c61b556201b6fa7b4b73e8395ca89c","ssdeep":"192:PeR2xr1DATimTzJI/SPbZK5LtjxCCbO6jzStakjQO0H1+0ViR7MrGtZJnBhnp+ET:CIpu2ICbO6j7iR7otHG","tlshash":"4ca25413f4f11432115390c5bea6a75fae9ad547c90ace5033bccbc68fc2d48899b79a","dom_hash":"domhash3a7c0cfbc512671ae64a1559ea9fe3f1","first_seen":"2025-11-24T08:11:44.179255Z","last_seen":"2025-11-24T08:11:44.179255Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"batonex-login-exchange.com/","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-29T08:11:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"batonex-login-exchange.com","ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2024-10-09","domain_rank":0,"first_seen":"2025-11-24T08:11:41.647561Z","last_seen":"2025-11-24T08:11:41.647561Z","alert_count":0,"request_count":16,"received_data":8879959,"sent_data":10323,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hammer.js","description":"","website":"https://hammerjs.github.io","common_platform_enumeration":"","icon":"Hammer.js.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-23T22:13:43.05661Z","alert_count":0,"request_count":2,"received_data":1024096,"sent_data":1026,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/jquery.min.js","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-14T04:35:11.667588Z","times_seen":185564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/hammer.min.js","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"084aa824c6e6f64cf28551d070abe00c","sha1":"dabfade6656a1018d065b5f3673f4154aaf7a8ba","sha256":"7953631f0e54794d2352a3cfa591c0914d73e14f90141058e3cf16bee7939bcf","sha512":"517ba666b64d88ec274dc6521cb39f713b346a8b363330561d73873ae07427f478e100747706392607dbbe58d77249557fae46738125e918d9fa59f07766b3da","ssdeep":"384:2b5vj+l3jfaksTAAvNWUwLATFqNCns+CSHDJDLrx:y5vj+5jfSTtrTFqNCs+CSHtD5","tlshash":"8b92c68633c7728192a720b5a0af020b6137988694cd596cb4bcdad57eb553c927bf3c","size":20765,"data":"","first_seen":"2023-03-07T12:26:23Z","last_seen":"2026-08-14T00:09:24.641076Z","times_seen":3320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7afbefd76222a2ff3afb9af39bc825ad","sha1":"7f183bf60bfcb5a34ecf4c415c0dbe92ee3369be","sha256":"97191c88d1ee5f6d188007dce92f42ba98aeb3d39222364fcd505f589400a561","sha512":"755bc91be4b562bc85c4f68b7a8f65df7504ecd830a1783031774b688a48a2a21572c82ea41de5066eaf050d648ce37bab04e34f821a2d5d3681918cf852fb1c","ssdeep":"","tlshash":"7651ce0eb8f610616e3330f6a9bf4405763565435906de10bf8c99d4cf4ea3ca29bbad","size":2551,"data":"","first_seen":"2025-08-08T11:23:55.935109Z","last_seen":"2025-11-24T08:11:44.194908Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e059168d08605442f4405bec8891cd7f","sha1":"198d5590e4bdc31aa8a5ca0c0fd52d03d3564f3c","sha256":"d7955351676c54c195560b050bed6b89d7cfa0dcb842fdc13b23b5505705be4b","sha512":"f19f47a5de548e7f10fe1c8ce204d7f76ed83dc0f5d4e6362a5847e9a9da65bb8991d71a592c189e99ef92e70d482b48e6f041745f62e953577c2be968414f4f","ssdeep":"","tlshash":"fff05d0531fb0ae07077622a43bb8e024e28091b9a88da00369c08b40f1d2acf2233ed","size":545,"data":"","first_seen":"2025-08-08T11:23:55.939533Z","last_seen":"2025-11-24T08:11:44.195834Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"57dc5627a1327dde9f2fe27539780976","sha1":"7105c7c1ee48b164f018580c3155f7092b817712","sha256":"5239aaa74e7d5e242f6246e7b840a59716f7bd8b5208597a5d585858713421f8","sha512":"6c09008718821dbb07ee359a419031c58075750b651e5a4af1782c0a06a164c2c947930f20f6ed66e158d9c6ffa41742f6f116a42ac945f9fe467e92bc631757","ssdeep":"","tlshash":"dd41de4424f704161123d02d5be34ac6e6b5e14b740dca8f366d72c71fc3464a2ebbea","size":2416,"data":"","first_seen":"2025-07-24T01:31:38.451055Z","last_seen":"2026-03-20T10:13:11.090045Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e15c748bdca76712b2b2ad5a622d0cf9","sha1":"91c4c70092497113065180d7bb24231a59bcce34","sha256":"1240f68dba931a075ca57745e6f8caef75704f85d285eb488e46f81bf767c1ae","sha512":"a6894b6ef739c9f0c80c2adae69595be5430ad5f1fc327ed3e2c9024bf2e8b277b31d7e50888f761527917567d92cd90f31d9680313d08ef92dedb733664284f","ssdeep":"","tlshash":"b211b907f36928177045f7e097d24b19b486f086de280768717c9fb19b90675b4276ac","size":954,"data":"","first_seen":"2025-04-14T20:20:11.734318Z","last_seen":"2026-03-20T10:13:11.090984Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/style.css?v=asdasdasssssdasd","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:19.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/style.css?v=asdasdasssssdasd HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nCookie: __ddg8_=1wedOSb7waMFPuD6; __ddg10_=1763971878; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QV6pKSre5iKbZney; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg10_=1763971879; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 05:04:30 GMT\r\nlast-modified: Wed, 17 Jul 2024 04:45:24 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 11209\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 14317\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":85742,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7177), with CRLF line terminators","md5":"3b385608eb79f0d5779811aac4492b7f","sha1":"a92eee29aa95d29b18d666c6710c2e3a145ec463","sha256":"951804befc5dd1c83d25e20062693f53f2383f190e7f7f9486ba22c5a63f72c0","sha512":"452eadd8933c8994c87e9199e941236f2bf9ae298ea884c9c644d71416fef7885c5c46831831e236ac4aa2eae953103504b6b1b878ea03d43be62f39e53d2739","ssdeep":"768:IL74TAU/ki3PF+HpmYz01mAsMZ10UG+sKeJyQa/BuW46WgIy0JsyGpcyRZPJoDr6:LTQa/MxgbG6ZTIuzmua2My","tlshash":"a68363e9c20f51039233caf47b998b5a7b5580a6860383b9bff1514cd2c91699e72fcd","first_seen":"2025-08-08T11:23:55.930936Z","last_seen":"2025-11-24T08:11:44.18067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/jquery.min.js","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:19.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/jquery.min.js HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nCookie: __ddg8_=1wedOSb7waMFPuD6; __ddg10_=1763971878; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iIf2ZHod25m9fh9Q; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg10_=1763971879; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 05:04:30 GMT\r\nlast-modified: Tue, 23 Apr 2024 17:29:52 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 11209\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 30034\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-14T04:35:11.667588Z","times_seen":185564,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans+Thai:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:19.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"86:F4:DF:07:D6:8D:EF:68:44:7A:73:C8:39:14:1A:2F:98:5E:A2:40","sha256":"A0:B7:4F:94:25:40:33:52:BC:F7:0A:E1:AD:30:BD:19:C3:E9:BB:25:0B:05:26:7C:F8:BB:F0:59:3B:E7:F2:8D"}}},"request":{"raw":"GET /css2?family=Noto+Sans+Thai:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 24 Nov 2025 08:11:19 GMT\r\ndate: Mon, 24 Nov 2025 08:11:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11799,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d774ee855a60c4a5a61505baf602cf1d","sha1":"e43b4f85fb85c591af25d8fe20c56314a446dd39","sha256":"eac9e39db25ba15e08a273ae53f89a0a80884a9f9c9de044e8b6fbcf7af6c624","sha512":"6a3583b999348ab4d81c98d3a46fa631a303a4b94ef2c81bde7f1cb032a4ab043acdc1776830398b12eac88744ed6c2c82afa40a343dfdc2dc91a5c798d1ec75","ssdeep":"192:kNhbNhBBNhNhMhB+hmh7hBlhDhehBshUhFhBbhJhQhBqhShPhBBhfhChBIhgh5hz:k7b7777ySQV19oI6Tzn2WcpJ5MsGX3D","tlshash":"5b32ee95051bd584ff836cc592cebe35ed1ea0219401e97c9ff924c8acaac2a432174f","first_seen":"2025-09-28T13:30:17.972072Z","last_seen":"2026-08-04T19:09:46.002161Z","times_seen":104,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":145,"dns":48,"connect":15,"send":0,"wait":34,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/KW4kpQeWkvlhQzvvoRwuIm8nQW01BMVq-MsjgDTPJfM.svg","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:19.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/KW4kpQeWkvlhQzvvoRwuIm8nQW01BMVq-MsjgDTPJfM.svg HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nCookie: __ddg8_=1wedOSb7waMFPuD6; __ddg10_=1763971878; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Tb1rrAeOzDxAr8ZV; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg10_=1763971879; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 05:04:30 GMT\r\nlast-modified: Tue, 16 Jul 2024 20:52:46 GMT\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 11209\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3269,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdf92724c3d482f7a487434461984244","sha1":"7685bc928a1bb3b3799bd367eb00105d306e4b6d","sha256":"296e24a5079692f961433befa11c2e226f27416d3504c56af8cb238034cf25f3","sha512":"95838b796c1ce797c285942a03f79a3320cacf1bad6816fc72a5732da39b4953c0394c37eb54bb459d572df87f599d55aab4cf95e63d6f4a8c56dd316c6106f1","ssdeep":"","tlshash":"eb61ab3d834d90e6f51d8af8ee2845e6f34e92f390c4f36131a8d53192a1ddae90db54","first_seen":"2025-08-08T11:23:55.883423Z","last_seen":"2025-11-24T08:11:44.182894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/hammer.min.js","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:19.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/hammer.min.js HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nCookie: __ddg8_=1wedOSb7waMFPuD6; __ddg10_=1763971878; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7CoKFeQx9U0rNMLG; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg10_=1763971879; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 05:04:30 GMT\r\nlast-modified: Sun, 09 Jun 2024 15:14:58 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 11209\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 7172\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":20765,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20581)","md5":"084aa824c6e6f64cf28551d070abe00c","sha1":"dabfade6656a1018d065b5f3673f4154aaf7a8ba","sha256":"7953631f0e54794d2352a3cfa591c0914d73e14f90141058e3cf16bee7939bcf","sha512":"517ba666b64d88ec274dc6521cb39f713b346a8b363330561d73873ae07427f478e100747706392607dbbe58d77249557fae46738125e918d9fa59f07766b3da","ssdeep":"384:2b5vj+l3jfaksTAAvNWUwLATFqNCns+CSHDJDLrx:y5vj+5jfSTtrTFqNCs+CSHtD5","tlshash":"8b92c68633c7728192a720b5a0af020b6137988694cd596cb4bcdad57eb553c927bf3c","first_seen":"2023-03-07T12:26:23Z","last_seen":"2026-08-14T00:09:24.641076Z","times_seen":3320,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/cap/cap.css?v=asdasdasd","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:19.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/cap/cap.css?v=asdasdasd HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nCookie: __ddg8_=1wedOSb7waMFPuD6; __ddg10_=1763971878; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NVcY387itaPC2Gug; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg10_=1763971879; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 05:04:30 GMT\r\nlast-modified: Wed, 17 Jul 2024 05:13:18 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 11209\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 3940\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":31898,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7f5f7e0ba22d1a920f9e3e5fb49d3f52","sha1":"8f706e3c6b562a7fde77d3c8edfda5914d8e29fd","sha256":"25ac94543d08052ccb81dfd05ea6bb8a5d9ff0d6f524d679702f5a6d93258dcd","sha512":"e523c5932198bb6664fe90fa4334336ac9e7fadf8517b2e44585e603f9c0b32e91112c9e75f30cb8b369b81349b88a691d30ebd5cff70e6963901069afc31858","ssdeep":"192:/byRHORclYu1F71WnPsqZqffelzHKMuQo3by0QJqHIrpQrp2yybyyJJNJ2eZe8RC:/GxOohWnPZqHU+MI3byAF","tlshash":"00e2fc37f9130104213f6e13ff956b58e23ec563ca220bbe72a9d8898f56d9851e7d12","first_seen":"2025-08-08T11:23:55.914993Z","last_seen":"2025-11-24T08:11:44.184761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/iconfont.e616017f.ttf","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:20.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/iconfont.e616017f.ttf HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/public/main.fda2bf17.chunk.css\r\nCookie: __ddg8_=QV6pKSre5iKbZney; __ddg10_=1763971879; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=axO5WMsRo7DUXA1T; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg10_=1763971880; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 08:11:18 GMT\r\nlast-modified: Tue, 16 Jul 2024 18:39:38 GMT\r\naccept-ranges: bytes\r\ncontent-type: font/ttf\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":81124,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"e616017f17f3dc140078f0735955b4af","sha1":"20477a129ad877bc76e3fe1e5579507bf97b1bb4","sha256":"55f98c911c694cc35a0e446d35b81eb03e4c379703594537224dd87cc9ef55b6","sha512":"c51f22153a3704bf66ff404b7ef5eaeea9fdbe2283f3a7683a86354d7a4884e98734e156bc46c587e4672d7a27a5e400d1230018865c5bcaa270e2adc293be1a","ssdeep":"1536:YJ3xeLPcoF6YWWzxPKWlhkLp4koeruq/4P52YR/fQR4dJU8r8dybEOyHs/udxLj2:o3xsPnFvWWzxPKQk+beD/m5tZfQRgrUb","tlshash":"e383e8079f9eeb5ed941d7aa4c3181f20cf59728727e960b69471c01bb0dab04ce879e","first_seen":"2025-08-08T11:23:55.894555Z","last_seen":"2025-11-24T08:11:44.185661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/PretendardJP-SemiBold.d17fdb0c.woff2","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:20.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/PretendardJP-SemiBold.d17fdb0c.woff2 HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/public/main.fda2bf17.chunk.css\r\nCookie: __ddg8_=9C5Y7YRpVP2WfORO; __ddg10_=1763971880; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YhM2Upbm30YyRRDQ; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg10_=1763971880; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 08:11:18 GMT\r\nlast-modified: Tue, 16 Jul 2024 18:39:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2151084\r\ncontent-type: font/woff2\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2151084,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 2151084, version 1.19726","md5":"fe863984feb0ec597e22bc4b33ba8c22","sha1":"84a661153d3260ac48297c7937dc779b2eb8cdf6","sha256":"a440ab20147d3cd8cef78cde628f8e5b9bf287d30dd7e3605bb7ffb7967f6fdc","sha512":"2e64114d5e879ac7dda1dde2ea5b5a0a972d317df15387ff5c9a1446e6711d61fc207159f98bcb6eba235ccfbbf9ad9c12717889f9867fcdf4bd5174a21801ff","ssdeep":"24576:IBrzY8rxFoliQD/NhYZstpapPc1QeJUB9dj7OM:8rtrxF1A/0Zst5Yj6M","tlshash":"b1253354f0177515ee0a9028d40afa977f6a54ef378bc5b368bc28b37f6030452649bb","first_seen":"2025-08-08T11:23:55.877409Z","last_seen":"2026-06-19T20:32:00.026374Z","times_seen":3,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/def.css?v=asdasdasssssdasd","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:19.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/def.css?v=asdasdasssssdasd HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nCookie: __ddg8_=1wedOSb7waMFPuD6; __ddg10_=1763971878; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zCd7XJNGMLOb7NhS; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg10_=1763971879; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 05:04:30 GMT\r\nlast-modified: Wed, 09 Oct 2024 03:41:48 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 11209\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 482\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"88dc8c7293537340eed0eaf44579ea71","sha1":"5fc3ee009cb8a191843e5cbaca41054d245c140f","sha256":"2efa9025a8f674758bd19ee9b09bf16dd482fee882b3b7b56eba63439f06d597","sha512":"d695d9c823039c2b97cd77fcd632ee4c886661aab1661fa385a39d667e296b41e6e862a3741968118f15c806940a234bfb170209d5d4ed04a25fc3fe2faf5cb5","ssdeep":"","tlshash":"1c415c556a020191fb3b1368ebf84a7ae470e4570c8719b9f7a1022f0f7153c4366fad","first_seen":"2025-04-23T12:00:58.002102Z","last_seen":"2026-01-05T07:03:34.63751Z","times_seen":4,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans+SC:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:19.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"86:F4:DF:07:D6:8D:EF:68:44:7A:73:C8:39:14:1A:2F:98:5E:A2:40","sha256":"A0:B7:4F:94:25:40:33:52:BC:F7:0A:E1:AD:30:BD:19:C3:E9:BB:25:0B:05:26:7C:F8:BB:F0:59:3B:E7:F2:8D"}}},"request":{"raw":"GET /css2?family=Noto+Sans+SC:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 24 Nov 2025 08:11:19 GMT\r\ndate: Mon, 24 Nov 2025 08:11:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1010925,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (934)","md5":"25df7ad3cc9d41dc374f67ca0ce1fd51","sha1":"8605da6d75ae847898dd845e9b03132902bc7287","sha256":"e27dcd97a41977f42e8582751915abd8e2020aacbe730c7756822af0bbc18ed3","sha512":"46a5b632b82ca58cde243444fffe9e1435a2a0033890a093086658a73cece8136442b326b46e65196ac15d6a28e1d3cc70bce94753ca9b9b08e88a46b93b9945","ssdeep":"6144:THdwAwapJzwfudgj1oCYEX5HAJSfO3twMY+VJTQLGBU7FI+AoDpPglCziHtwoQy/:T1GnIp67sL","tlshash":"e1250da5460785cffde75ca352ced9147ea968bcf980893d52f419d3ac0a04ad0dbb8c","first_seen":"2025-10-20T22:06:13.362199Z","last_seen":"2025-12-31T04:10:14.809542Z","times_seen":19,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":170,"dns":47,"connect":17,"send":0,"wait":73,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/main.fda2bf17.chunk.css","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:19.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/main.fda2bf17.chunk.css HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nCookie: __ddg8_=1wedOSb7waMFPuD6; __ddg10_=1763971878; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Fm5LsYqq14fZQCBA; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg10_=1763971879; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:19 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 05:04:30 GMT\r\nlast-modified: Tue, 16 Jul 2024 18:40:18 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 11209\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 6219\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":41958,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6353f9c92f85428bcac37210ab5a0eca","sha1":"ddf57163d9dc4549c299c58f75c6ebc118e4c2ea","sha256":"140e71c1e944f956a3981e2dea3cc1ca1585a6cdadd29ca3fc3ab7e3ab9ad921","sha512":"b6e5dd11e43d9e0aec15e61eb3f9de33b6fba1593031c257ea2077a4689265638f0faca7f06278b612f7b0eb264aac57fe7bd7cb27bf375c9d49b5eee169ea02","ssdeep":"768:rvzlMhfzAGgmtImJwiQ+RP2K8SIXosXvcyvjnmXzReW3fMAKAV:rvzlMhfzmmtImH1t2K8SIMX3EFAV","tlshash":"cd13a9f8987c11514b71dba3a3537a322b0993b5cf820d19f256b94ce6e3615a092ffc","first_seen":"2025-08-08T11:23:55.889415Z","last_seen":"2025-11-24T08:11:44.189623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/PretendardJP-Regular.3133d070.woff2","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:20.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/PretendardJP-Regular.3133d070.woff2 HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/public/main.fda2bf17.chunk.css\r\nCookie: __ddg8_=9C5Y7YRpVP2WfORO; __ddg10_=1763971880; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BnVI8n1CHOOFjRmu; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg10_=1763971880; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 08:11:18 GMT\r\nlast-modified: Tue, 16 Jul 2024 18:39:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2087972\r\ncontent-type: font/woff2\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2087972,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 2087972, version 1.19726","md5":"3aa67d23deea15166d7761330d356144","sha1":"8bc11e1ad16ca576dd5f193c8b2a8c4e710482e8","sha256":"7ab50340a82d7ccb578e4ad10e1c5ed234dee66f52aba21d6869fb17b8e81f4b","sha512":"d7e2930d96380138e2627f3da607de9e0a9336a35ce31653b5c843cc17ac43407a85631515cc66b2af89c77faa66662583ac717d9672ce59f3d36786767f161d","ssdeep":"24576:LC3VLwLqVEzQ+icuPRkA4YOlvvzkLFn1vtbbCX7dK:2idmcuPRLftkxK","tlshash":"772533d5e94b9d8083017b733e3defd8bd5b37aa46630e28c7da34748e8858e1623494","first_seen":"2025-08-08T11:23:55.92563Z","last_seen":"2026-07-03T08:30:33.856626Z","times_seen":4,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/apple-touch-icon.png","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:20.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/apple-touch-icon.png HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nCookie: __ddg8_=YhM2Upbm30YyRRDQ; __ddg10_=1763971880; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eo9krN418z5aZvfe; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg10_=1763971880; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 08:11:18 GMT\r\nlast-modified: Wed, 09 Oct 2024 01:31:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5878\r\ncontent-type: image/png\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"89873357a4529dbea8158c8cbddb86e3","sha1":"f9e40d3e01e8e74a710732465a8569ee51c2e6a4","sha256":"ffde2b209609f93a9ac4b97a0e0519f57a461ee429a0a2f5d5727894ff6396ac","sha512":"342f8256645a58d6314624b28757241a1b8a00e322c186aa0c12cb0f299f968dfd87684fe41d1070d0963524ebe2651de2c15379fb5757f9aef8f8986d31c2a4","ssdeep":"96:1w0oMiyy1MTOn9u51+Kg4Pf23jZNgon+h8MUg33ZiHj5xyIfP2GDKcWWW+:1wJMAM1qcPOTZNx++MUgn8Hj/HKE","tlshash":"4fc17e420b5c71db5b7bc31e242de12c4bea16b7cfb44503c37bda8dd89de244891a94","first_seen":"2025-08-08T11:23:55.902702Z","last_seen":"2025-11-24T08:11:44.191213Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/PretendardJP-SemiBold.d17fdb0c.woff2","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:20.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/PretendardJP-SemiBold.d17fdb0c.woff2 HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/public/main.fda2bf17.chunk.css\r\nCookie: __ddg8_=axO5WMsRo7DUXA1T; __ddg10_=1763971880; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9C5Y7YRpVP2WfORO; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg10_=1763971880; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 08:11:18 GMT\r\nlast-modified: Tue, 16 Jul 2024 18:39:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2151084\r\ncontent-type: font/woff2\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2151084,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 2151084, version 1.19726","md5":"fe863984feb0ec597e22bc4b33ba8c22","sha1":"84a661153d3260ac48297c7937dc779b2eb8cdf6","sha256":"a440ab20147d3cd8cef78cde628f8e5b9bf287d30dd7e3605bb7ffb7967f6fdc","sha512":"2e64114d5e879ac7dda1dde2ea5b5a0a972d317df15387ff5c9a1446e6711d61fc207159f98bcb6eba235ccfbbf9ad9c12717889f9867fcdf4bd5174a21801ff","ssdeep":"24576:IBrzY8rxFoliQD/NhYZstpapPc1QeJUB9dj7OM:8rtrxF1A/0Zst5Yj6M","tlshash":"b1253354f0177515ee0a9028d40afa977f6a54ef378bc5b368bc28b37f6030452649bb","first_seen":"2025-08-08T11:23:55.877409Z","last_seen":"2026-06-19T20:32:00.026374Z","times_seen":3,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/checker.php","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:20.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"POST /checker.php HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 19\r\nOrigin: https://batonex-login-exchange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nCookie: __ddg8_=jiner5cCmnI5zYIx; __ddg10_=1763971880; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"formSubmitted=false"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wBsPXArn1gpisoRS; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg10_=1763971880; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 08:11:18 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"d361e6b3f641788dace6707209d55a63","sha1":"02826cbae05e1312a9b9fd2e58ca2a07e488c76b","sha256":"fe85cceb474303eb80a5ca9a60b16d92208a8e0b38647647654b0c42447b51f7","sha512":"2dfdf35e0d21943e04a5a5a4eea19302af309931523cf0b87548f189c418a0a318c1ad2ff703895b3c50946c9660f26c2345d0abc8017593360ed41857e2363a","ssdeep":"","tlshash":"a1600000000000030cc00c000c000030ff333f00000f00c0000c00f00000cc0c00c000","first_seen":"2023-04-05T19:24:08Z","last_seen":"2026-08-14T02:16:39.802074Z","times_seen":1748,"resource_available":false,"data":null}},"time_used":15036,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/favicon.svg","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:20.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/favicon.svg HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/\r\nCookie: __ddg8_=YhM2Upbm30YyRRDQ; __ddg10_=1763971880; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8vI9dzeW2x0gcbUX; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg10_=1763971880; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 08:11:18 GMT\r\nlast-modified: Wed, 09 Oct 2024 01:31:50 GMT\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":8291,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7853030a4a162ca4eada851b49174f3","sha1":"4dd9de537b05bd94239eac92faaa8aef8b2dc2bd","sha256":"1e4cc4a013973e635193441194b55321008aa7138134374ab2f7d16d1e756502","sha512":"ea2c7522b284d7e5d44aa00d95e8fb45d154e0d91bc641fd78430c13ce2be6df4d22801af8e3938e767de1557f6c13d956ee572125fe39b5a566069ecd04cb88","ssdeep":"192:p9dxd3DFX4Q/B64sjk2La8RcpZIXT/oQAPwYWUP:RvFBfma8RcpSD/oQYwYWY","tlshash":"d9029dde99af3cffc41ec3d6ac7c6ade3986161d027943408e1ba014a4139935b7b21b","first_seen":"2025-08-08T11:23:55.907916Z","last_seen":"2025-11-24T08:11:44.1926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-24T08:11:18.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1wedOSb7waMFPuD6; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:18 GMT\n__ddg10_=1763971878; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:18 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:18 GMT\n__ddg1_=K9RPuXWRk8DqTGApEMax; Domain=.batonex-login-exchange.com; HttpOnly; Path=/; Expires=Tue, 24-Nov-2026 08:11:18 GMT\nPHPSESSID=9fa919cc5296a5ea373aa54dd7b46341; path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 08:11:17 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hammer.js","description":"","website":"https://hammerjs.github.io","common_platform_enumeration":"","icon":"Hammer.js.png","categories":["JavaScript libraries"]}],"data":{"size":22455,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (533), with CRLF line terminators","md5":"cf1d1c3d7678cfddbf2c689c202cb056","sha1":"c4969b2e53d0fcf9602e22bfe2fe4af726bb945e","sha256":"1e5ffd77cce78297986d9ec99e18cba5dd9a2804d0b60ad99edc0969d6d50923","sha512":"2e03a28bb2d853ffba4b4d4341e9939aa110a0751687cfbe8c1bcef8e5466d1f2b086be982ae0446918825a22d6a9ef531d38a1c0c6df20de2f70c535fac0e87","ssdeep":"192:CSRAdaXNATBmTrCIecoHpb9K+Mo2KRxEg6tCt/0WtS/vQcslFkSccJvhYP+E0cHY:lDq5XottCt/svylFkSSHY","tlshash":"1ea23512f4c0182241739195dda1ab9ffd9ac147c60a8a5173fc9bc74ff3d048997b9a","first_seen":"2025-08-08T11:23:55.917591Z","last_seen":"2025-11-24T08:11:44.194149Z","times_seen":2,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":115,"dns":48,"connect":19,"send":0,"wait":521,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batonex-login-exchange.com/public/PretendardJP-Regular.3133d070.woff2","fqdn":"batonex-login-exchange.com","domain":"batonex-login-exchange.com","tld":"com"},"ip":{"addr":"45.10.243.7","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://batonex-login-exchange.com/","date":"2025-11-24T08:11:20.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batonex-login-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 18:52:00 GMT","end":"Mon, 08 Dec 2025 18:51:59 GMT"},"fingerprint":{"sha1":"46:1E:46:7F:89:3D:EE:FC:48:EA:D4:E0:02:49:55:1B:3B:5E:41:64","sha256":"B0:70:90:B8:5E:DA:10:8F:34:4B:22:23:0C:39:77:4F:20:27:81:75:6C:A0:DF:01:18:42:39:35:C5:35:51:21"}}},"request":{"raw":"GET /public/PretendardJP-Regular.3133d070.woff2 HTTP/1.1\r\nHost: batonex-login-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://batonex-login-exchange.com/public/main.fda2bf17.chunk.css\r\nCookie: __ddg8_=QV6pKSre5iKbZney; __ddg10_=1763971879; __ddg9_=91.90.42.154; __ddg1_=K9RPuXWRk8DqTGApEMax; PHPSESSID=9fa919cc5296a5ea373aa54dd7b46341\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jiner5cCmnI5zYIx; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg10_=1763971880; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\n__ddg9_=91.90.42.154; Domain=.batonex-login-exchange.com; Path=/; Expires=Mon, 24-Nov-2025 08:31:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 24 Nov 2025 08:11:18 GMT\r\nlast-modified: Tue, 16 Jul 2024 18:39:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2087972\r\ncontent-type: font/woff2\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2087972,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 2087972, version 1.19726","md5":"3aa67d23deea15166d7761330d356144","sha1":"8bc11e1ad16ca576dd5f193c8b2a8c4e710482e8","sha256":"7ab50340a82d7ccb578e4ad10e1c5ed234dee66f52aba21d6869fb17b8e81f4b","sha512":"d7e2930d96380138e2627f3da607de9e0a9336a35ce31653b5c843cc17ac43407a85631515cc66b2af89c77faa66662583ac717d9672ce59f3d36786767f161d","ssdeep":"24576:LC3VLwLqVEzQ+icuPRkA4YOlvvzkLFn1vtbbCX7dK:2idmcuPRLftkxK","tlshash":"772533d5e94b9d8083017b733e3defd8bd5b37aa46630e28c7da34748e8858e1623494","first_seen":"2025-08-08T11:23:55.92563Z","last_seen":"2026-07-03T08:30:33.856626Z","times_seen":4,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}