{"report_id":"5f5832d6-8bb8-45b0-9723-3431af817185","version":6,"status":"done","tags":[],"date":"2025-10-04T21:43:13Z","url":{"schema":"http","addr":"www.cryptoexvip.com/html/","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/#/home","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"title":"CryptoEx"},"submit":{"url":{"schema":"http","addr":"www.cryptoexvip.com/html/","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-08T21:43:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.cryptoexvip.com","ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-28","domain_rank":0,"first_seen":"2025-09-28T13:10:27.124253Z","last_seen":"2025-09-28T13:10:27.124253Z","alert_count":28,"request_count":28,"received_data":3274417,"sent_data":16783,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2025-09-29T01:31:04.193551Z","alert_count":0,"request_count":1,"received_data":5408,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/tradeview/charting_library/charting_library.min.js","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b4daca49ae2c0225a9232dea2148df1","sha1":"fd3711c6a439061420442f2a57b0b3a2968d3625","sha256":"eed6506775e8d1fca20b61a590e91c42c82550d2befee83f5d08f163bae4b296","sha512":"259daa40d4b442672f4cbb730e8f148b3488ccd2d18db890875edc411bd093eda9a8fb8933dd2896915ddbdb0585d8bf3755c576d61375e780d68b3afec254ff","ssdeep":"192:9o937kYFUdQ+lr6lw2rfnJ8NRLP6tyPPv1id3Kuv/ISJhv+HIhJPh3F6R:StkYFUG+lD2rfnaNRLP6ty9iJKQ/ISJ0","tlshash":"90123258ed2479320acb40f4427f290f9235d278d84a44ed3c94e6ec59fd847a96fbb8","size":9902,"data":"","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-07-28T18:15:40.799488Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/js/manifest.e1d70b6ac4771fabe573.js","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87e574377ff568e5d770df661f9be658","sha1":"e375aabefb7f50360408f53ee8aff85d61b79831","sha256":"1af4601b8e1d9e7299094f999742aec2ae6faa0f2edd28807bc69dc2d5e3020e","sha512":"e3a9fc1f4f64f8b2147e247325490b73bf8ff572b453c2d6d9be015469b6aeec00162a465a3dd3e8afbbc2d42bcc4693d12217a16f0b1819515dfc3448198d84","ssdeep":"","tlshash":"ff3183c632a1f4f602a718b8043f9159f03d7d51281deed8d349d0a6bd36c55822abb5","size":1604,"data":"","first_seen":"2025-09-28T13:10:30.823183Z","last_seen":"2025-10-04T21:43:17.587315Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/jquery.js","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9087a9859288a8b9e5275a823c2ace1e","sha1":"f2c621911b387b2a6399c08d05c7027653a9e072","sha256":"730fa28a30b20e876e67b0ceacc14ef814ade02fc3504d91435675f5e847f287","sha512":"e46f3420f05a12c3063df19a03689b6029d479230d03fddb5d2adc4abf655c795c3c1b3777fc3d6fc7a3cfbfee089ef19d5fdc925be73d5dbdc64524a1a253ab","ssdeep":"1536:GP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrA:Z+41hJiz6fhdlTqya98HrA","tlshash":"5f83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84342,"data":"","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-02T00:06:12.694186Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/js/app.2a30389728ed6e79e25e.js","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c746ce4c5e3f013ed42d1cfc081fab80","sha1":"b5d6538c6abf26a69c10c1615035012a1d74e276","sha256":"7493140427987e5fbb5947563b28ceecfb6cd37b63877916acc8d164c1660531","sha512":"0385019840eea66927435231e33d8cc836fde5e0121b64f690fcedde48d50622ec24412c10469f636c501e70d96eabdef3262bd27637c88fdf616cb841b23bee","ssdeep":"12288:oCQX6ri0j0VpRmw4o+DoFH7efEtYjZC9B5d:o3X6ri0j0VpRm0FH7efuYiB/","tlshash":"da5528168ab724318267f168999b18487b38834f8c663d38bf5c45884f5d42e92f7fbd","size":1313017,"data":"","first_seen":"2025-09-28T13:10:30.84055Z","last_seen":"2025-10-04T21:43:17.621013Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/#/home","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fcaea4b8885ca5c1fb3ddd5c490da5c6","sha1":"35745f87b37210d992a9ed534a593ae500b7adaa","sha256":"934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272","sha512":"65e3bda5b8bd909b2fed0a25e3d6d3d7d2984601de4a906783c783097fcd8902ea1c2fa05d33619126415bc5000a72e8459eb81c971a85e2ddb374f9fd9231aa","ssdeep":"","tlshash":"889002c520d965518ad321a061261a46615a04f914a48c5091589c56287303092695bc","size":54,"data":"","first_seen":"2023-04-12T08:25:39Z","last_seen":"2026-08-03T23:50:49.863698Z","times_seen":26051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/js/vendor.11b2cc74e04f8ef8f4de.js","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"382ca36dffee7d558df091ae051f027c","sha1":"83452088fbf32bbf83034e97917f6fa22d0d5f6a","sha256":"5cc683764426ea6f0bbe99e8759ff4982b769cffcc17eaeebfd5dc7faf642b44","sha512":"3432e7e9e583ce2697dc051c3b994c3ab7304291a3b43b8bc1427aa829a9aaf7ed6f8dbdafa23bdce4aabf1d7efb035a8e77a4c117c8a260c0e8cf8cbc9612da","ssdeep":"12288:3XicuBPPTBEX1FldnbkVdlSERaKN2QhHHYevNw:HyBPPlEX1FDnbkViwPHtvNw","tlshash":"d025198d72d1b47147e361b0503f250bb33b295ca80980acb675d8ea6cb994d922ff7d","size":1057306,"data":"","first_seen":"2025-09-28T13:10:30.843605Z","last_seen":"2025-10-04T21:43:17.623383Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eba13864bdaace5bbc1ac1731321e6a9","sha1":"06fbdd7268988a0f612c3e5e53ac0c65be6cd5d6","sha256":"da5bff7b4ecbcf1c01299f62df2d64908c3c663bd9a5fd297ccdf4bf25ccf7f5","sha512":"62da37379d0d816a4463203a876cf4509efeb199cb365b0199e9a4f3175169cda5c705ff6ca35ab42df8ad8059eb3c3992efb871099b196cd8b2842527c46c55","ssdeep":"","tlshash":"37a0021a40ae0f4090f104ffe4842030827f5119e16c7720b71251143ccf10a57a7bcf","size":67,"data":"","first_seen":"2025-09-28T13:10:30.842064Z","last_seen":"2025-10-04T21:43:17.624593Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.cryptoexvip.com/api/news/list?category_id=25","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /api/news/list?category_id=25 HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=idnrzscBHA4ZbEjw6t%2B2xr%2BfkqBnuis9Yf%2BpnwgdiU%2BE6jTE0At%2BMDrwzoesdLtFIllLNhZGMxUTffRgz1I%2BaMShnDx75NSWc%2BanQJRuKcS5\"}]}\r\nset-cookie: cryptoex_session=eyJpdiI6IjYyMk4xVUJ3R1dWSENSbWZYaFJkbGc9PSIsInZhbHVlIjoiTGhJU1wvcFwvWTNNeHJ2UmFTaW1cLzVWaFlndzh5bHRFUzNMS0ttdVZ0VGx4NWZHMitsZDloSktcL0trSTNaUmlLVVI3VWxxdHB4dG9ZRW02ZnMwNTR4QjJBbkxVV20xUVFTYzI2S3FjQjQyTlwvbDljZFJVdGYraVNQWCtYZ1FZeFZcLzUiLCJtYWMiOiIxMjAyYWZkZWYwNjY1YTIzNGIxYWMxZWY3MTcwNzBjYTUwNTI2OTBmNzI4NDNiMTQwNTkzNmE4MjI2YTMzNmE4In0%3D; HttpOnly; Path=/; Max-Age=7200; Expires=Sat, 04 Oct 2025 23:42:50 GMT\r\nx-powered-by: PHP/7.4.27\r\ncache-control: no-cache, private, no-cache\r\ncontent-encoding: br\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9897d9f3df2bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1434,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e5002cdacbdea617f7d591c78766049f","sha1":"358338ab1a9df6a9b4c1c7a16aa6a4bc39e99fab","sha256":"d6822d0b002441d289388cdd53f747871c3962baebd68e7eb83c00ab11bd113f","sha512":"a308f29071c643842e514b44dcfa1a43cc62e87b51b2c1cbc7b2081efa1cff4274053922996a56f22b5e45f4d3552d3e9bfe3d99dd9956626cec932e4fd2c8bb","ssdeep":"","tlshash":"8721548d076c68c1c3f951d23d767e9eb449368376810fae33c9c86c82f92c8563592a","first_seen":"2025-09-28T13:10:30.838751Z","last_seen":"2025-10-04T21:43:17.585037Z","times_seen":4,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":924,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/js/manifest.e1d70b6ac4771fabe573.js","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:48.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/js/manifest.e1d70b6ac4771fabe573.js HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 21:42:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: W/\"683aa383-644\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlsS%2F5AdBoKndJGaxkUM%2FLuE4JwNVdg%2Ftu%2BMP7AA1uGebJQc1lZHItpPsB8Z%2FWT5AJI6FgFVnBdXU2zq1RM04X0w7Fmktt6nLjELoHaGhSyq3S8%3D\"}]}\r\ncf-ray: 9897d9e78837a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1604), with no line terminators","md5":"87e574377ff568e5d770df661f9be658","sha1":"e375aabefb7f50360408f53ee8aff85d61b79831","sha256":"1af4601b8e1d9e7299094f999742aec2ae6faa0f2edd28807bc69dc2d5e3020e","sha512":"e3a9fc1f4f64f8b2147e247325490b73bf8ff572b453c2d6d9be015469b6aeec00162a465a3dd3e8afbbc2d42bcc4693d12217a16f0b1819515dfc3448198d84","ssdeep":"","tlshash":"ff3183c632a1f4f602a718b8043f9159f03d7d51281deed8d349d0a6bd36c55822abb5","first_seen":"2025-09-28T13:10:30.823183Z","last_seen":"2025-10-04T21:43:17.587315Z","times_seen":4,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/img/expc.bc2733b.png","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/img/expc.bc2733b.png HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 239709\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: \"683aa383-3a85d\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lAdajYsOeZPWVFkBO7fv33K3CU7JfM12jdqy6k1akOnehrg3A2w3lE3zEe5KyYw4WyZraZFSo%2BIhCDsleE13I%2F2E8dmZIc1KfKUi%2B%2BZ9d72F\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9897d9f3bf1eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1036 x 606, 8-bit/color RGB, non-interlaced","md5":"3abff89a88d2db2e42ab822eeac161d8","sha1":"927efae914a1e28650209871662e970ae6793a39","sha256":"475b43a412fdbe6ff55ee1902dd390954ae885ec6bd214489022838257bd8d36","sha512":"1ceca8bbfa681fcd25a804c336abf7dee630312547b21e62f29b338891a467e60f830ff64ce2433dc90fb36e643dc6f2af932e444ea4f4b73e2dc9bfac719c16","ssdeep":"6144:K+GTSuVn3m1C2/jnoZ5pRLAlwHEx8r3oG+93VUs2z5H+G4sd:vMSK2f/jyJAlOEx8rf+9FzCeG4y","tlshash":"b834121fa5c6b0fb87b946367a2abfdf5f32065ee005b37c9ee91193e48602d4608d44","first_seen":"2025-09-28T13:10:30.80037Z","last_seen":"2025-10-04T21:43:17.58943Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2949,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":625,"receive":2324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_980575_ajisweidzhv.css","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:48.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 16 Jun 2025 09:41:05 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"64:77:72:8B:BB:58:44:79:90:C3:B0:8D:35:BC:EC:6C:D6:35:BD:83","sha256":"3D:49:49:78:42:46:FF:F7:52:9B:6B:82:DF:7E:54:4B:F9:BA:D8:34:14:1D:21:67:63:4E:5B:62:A1:D8:85:B5"}}},"request":{"raw":"GET /t/font_980575_ajisweidzhv.css HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: text/css\r\ndate: Wed, 12 Feb 2025 14:55:38 GMT\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Origin\r\nx-oss-request-id: 67ACB66A14A30E34310A1EF2\r\netag: W/\"C255C7F00ED500A6B42E38D62D221974\"\r\nlast-modified: Sat, 25 Dec 2021 05:34:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14092664258145323778\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=63072000\r\ncontent-md5: wlXH8A7VAKa0LjjWLSIZdA==\r\nx-oss-server-time: 21\r\nvia: ens-cache8.l2de3[0,0,200-0,H], ens-cache7.l2de3[1,0], ens-cache12.se2[0,0,200-0,H], ens-cache1.se2[1,0]\r\nage: 20242030\r\nali-swift-global-savetime: 1739372138\r\nx-cache: HIT TCP_HIT dirn:9:269411719\r\nx-swift-savetime: Fri, 13 Jun 2025 04:42:46 GMT\r\nx-swift-cachetime: 52654372\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517596141682745977e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":4499,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3305)","md5":"c255c7f00ed500a6b42e38d62d221974","sha1":"fe54bceef2fcca1b0060158db91f0cb62e0bcc01","sha256":"886887d33281afc78bb8009dac51b7f233453ea15c78a740b737dbff508404b0","sha512":"a0355fc2e495fc96ac7079ed2c8e62ec610561bb073f50b36f0b6655049ac6d508c148a2eca760c7523f3843619f4ebed29c746553e3fa73c77a40bf63d4c9a4","ssdeep":"96:+BNrLoTE4oZGnQBiYF5Ys0DKTsx5BM3BjcxqHrfAAdqMEFerZnYh:+TUE4oZGnQBiYfBcKYx7M3BYWVtYh","tlshash":"54914cf295be3d878f80da4b770462912d0d323b9dcb6c669d257c497ef3302a282794","first_seen":"2025-04-08T09:35:30.324609Z","last_seen":"2026-06-06T07:35:01.88863Z","times_seen":95,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":36,"dns":3,"connect":8,"send":0,"wait":10,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/js/vendor.11b2cc74e04f8ef8f4de.js","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:48.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/js/vendor.11b2cc74e04f8ef8f4de.js HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 21:42:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: W/\"683aa383-10221a\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tCdXBKrIv7DQSB3w2Xu2NcjKcmejA5xB%2BNf8koYP6CXCuN3iWskcrn5c7N%2FZO8Z0xZdErlNPqTJaEZL5D%2FEEe9UIIh0UNONQVzASJhxiPErYT%2Bk%3D\"}]}\r\ncf-ray: 9897d9e78839a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1057306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41508)","md5":"1f5c71ab8052e5ed1f9abf5fbdd6bd01","sha1":"f081ab01e58ef39e32e20ce3b851c65c3a04f4a2","sha256":"ede10afb42eb8006081417a28646bf2a136fe9569a1a77964a6eb4f22be7b886","sha512":"95d39d15e60ed3627e31517635911ef1b95d4d6093dd7ab89bb2c7592b4f44b867c02671c27ac2eed99ca953b24e29f1be394fda8552d34c2dcb3a2cbb6bdeb1","ssdeep":"12288:3XicuBPPTBEX1FldnbkVdlSERaKN2QhHHYevNA:HyBPPlEX1FDnbkViwPHtvNA","tlshash":"ff25198d72d1b47147e361b0503f210bb33b695ca80980acb675d8ea6cb994d922ff7d","first_seen":"2025-09-28T13:10:30.835283Z","last_seen":"2025-10-04T21:43:17.59173Z","times_seen":4,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/api/default/setting?key=app_download_url","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /api/default/setting?key=app_download_url HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:52 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GOH9m8ZHyshlR534rSP8spv3NxcNB%2FFJlIQLKsl%2FSZes06WLzObdXIC%2BSJYNriAQeh7B3zLdyXMolj6RjwyT5avvhZ%2Bhog6lMM43r3ZQwkx7\"}]}\r\nset-cookie: cryptoex_session=eyJpdiI6IjY2dWI5TG1LcmRycklGTFFmcnJNZWc9PSIsInZhbHVlIjoiXC96eUY3QUJlZG5Cb1EzZzErQlpmZmdhNENQZ1U0UEYzaHpuZUVQN2ZqRjB4aXdpMTdjMkZjRlRoNFppTE11cmpXWlpTUDMrRTAxVTI4ZHY4SjV5SEs1MGtTbDlucEdzYkpmZlhLSGZYUVVmaGZMWjBxRXZBaXM4Y2lLMm1QTmZSIiwibWFjIjoiNWZmOGExOWRlMTM0MTY3MWQxNDE4ODE4MGFkOTNkOTQwMDE4M2Y4NTdlMWU3YmVjNzQzN2I4YWI4MjlmNWZkNSJ9; HttpOnly; Path=/; Max-Age=7200; Expires=Sat, 04 Oct 2025 23:42:50 GMT\r\nx-powered-by: PHP/7.4.27\r\ncache-control: no-cache, private, no-cache\r\ncontent-encoding: br\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9897d9f3df2ab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"89c7371b1bffab86a447c516fbced448","sha1":"a698ac48a2e6a95b96e2ae09d30965c42c993475","sha256":"2d2e2bbd8f9dc4a139435ed61bd9a29a4d7be812c48d6b096ed7146c6d246dc8","sha512":"c24a3a4a8952f5339c9a9d253ee783d1bee740041d976189390405681d1cfaf895152010887c0c4d5808aa792ec494eed447c00181243e8d48c92452efcf85f2","ssdeep":"","tlshash":"89a012d667067082c34401c85518cb0d50032083080083bf198d44318ea81581111030","first_seen":"2025-09-28T13:10:30.832713Z","last_seen":"2025-10-04T21:43:17.593442Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-04T21:42:47.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/ HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 21:42:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 May 2025 15:55:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0HKfuPwfz10eq2%2B%2FylLnEbQogK8ck2SCe238PYXkz38wv5uNoyy4XaP0IxQH%2BnjHKg61UODR6qDvtA%2FzLVNJ3QUFlD%2BqTr7lrP6W2tYjMcyeaSU%3D\"}]}\r\nx-cache: MISS\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48; HttpOnly; Path=/; Expires=Sun, 05 Oct 2025 16:00:00 GMT\r\ncf-ray: 9897d9e34dfba41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":934,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (934), with no line terminators","md5":"9276c0f836769b4603cb89e6896a36fb","sha1":"b4ac70803b3d864747bb9bdc6e841e94aea7aabf","sha256":"32201033cdb18a46783d04924b3e49bcf0d400f1ca8019f84bd309d6483919aa","sha512":"74fbbf8f5fed9dcd71b22109feb2bfa09db92c030dd9a7f503c3d312e9db03a624fdcc4f44762e5fb8e1fd785b167cfad37e04222d480bcc23ac34862d5607b0","ssdeep":"","tlshash":"871104579d49c59d58602d9eb874f02cc11fd8b53761dc00a7c028a9ec943dc1e6ec4a","first_seen":"2025-09-28T13:10:30.810077Z","last_seen":"2025-10-04T21:43:17.594751Z","times_seen":4,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":171,"dns":1,"connect":1,"send":0,"wait":625,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/img/kor.9172f99.png","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/img/kor.9172f99.png HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 24772\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: \"683aa383-60c4\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pjrsH2z0a4akCN80vjUUa55KDOCH%2BIfZGX5ql15hBNGAsF%2BS54QuImfsBCdNCNOiVPdAZlX4kxBz5%2BR%2BEBngUu0ZAYPiEwSNlOcjNtva6%2F5d\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9897d9f3af1db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 168, 8-bit/color RGBA, non-interlaced","md5":"9172f9948f3ec472fde22d4606d7576e","sha1":"f5c06b9b4c95434f17f7bfda3a3fd2cea3d95dad","sha256":"dcf8f84c9a41926e8e2181034df4635ec6c25b534441126809064c8e564e7525","sha512":"2fb89583cde86d1ad95ce9bb312ec2aefd795837e59a11378bebb6f4ae95c109bb6f7e876ef85e616d12de6757bdc524c1a3c1c6e797891e8a5ca6185a51d714","ssdeep":"768:OcwmOQ3S7vLDYRJy4hQxuEYj7XNLo2u2R96GD774v:OVmOQcvLDYRJyE0uDj7/RTPA","tlshash":"e0b2f1d453130f68072d0d2236f7b0839e513afd526964b81307f4aa53139af77b9ae9","first_seen":"2025-09-28T13:10:30.816949Z","last_seen":"2025-10-04T21:43:17.596091Z","times_seen":4,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":626,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/api/news/list?category_id=23","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /api/news/list?category_id=23 HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIReTdAIcKZtc6BKYKNrrz37vpnRnO53eSf5%2FhH83wy%2BAo9eZvtHqQ3A3Y7XtAifGTKh2d%2BoDj%2FuVLYuvYR21G%2BzGFLGnaDNiakS5hmJIcxo\"}]}\r\nset-cookie: cryptoex_session=eyJpdiI6IjFZQU5kWjZya2Rkb1pkcktDUGRrMWc9PSIsInZhbHVlIjoiQ2NsQXBleVNuTmFIdDJcL3MrT281ekxuXC83SW8yNDFlam53N3hocllxNjhPV2JlXC9cLzY3M1VlXC9GeXNmeHpRUlNYTmpCYVM4Z3pPV050RUVEc1ZRWnFuY2JlNmJscU96UmNhSUlYRFM0cEsyUVdqbWhrbmVtZHA5aHp3NkJRQ0dlRCIsIm1hYyI6ImIwODE5ZWZhNzNlMGM4ZGZlYzQ4YTg3NjNhODdjNjVmZTdiNDE2N2ZmMTVlYzZkNWU1OWMwOTRlZjU2MDI0N2IifQ%3D%3D; HttpOnly; Path=/; Max-Age=7200; Expires=Sat, 04 Oct 2025 23:42:50 GMT\r\nx-powered-by: PHP/7.4.27\r\ncache-control: no-cache, private, no-cache\r\ncontent-encoding: br\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9897d9f3df29b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2402,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"58ed7fdb24b910b2cfa13ae3b19af325","sha1":"a233621cbdbb778d380c10eba8b8c7cd27e0a6bc","sha256":"3ccca5e208b20dda6d667bb281387ee74f912b91ab84f7a07a67ed55b8c6d3e5","sha512":"9e33194dedfcc3f5b22a4de89353d4ff31b442c073e0ae13230710f19a38240323529d1f189b7c9357011ebcfa96807490d929d24e3efbe6c1466a388fc383d5","ssdeep":"","tlshash":"ee41efbd4f6cccbccbcd91d11cabea4db0d53a4776e02ee13fd0ce9880a89854906526","first_seen":"2025-09-28T13:10:30.820118Z","last_seen":"2025-10-04T21:43:17.597919Z","times_seen":4,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":762,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/api/default/setting?key=contact_mobile","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /api/default/setting?key=contact_mobile HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibMxMPgK2ENu88qkMOKbVxttDfNV10YrVcjavqxojvooGipF1voYeisqbvi48pI%2BFPjaSyXEcpZpcCGxxNgs6ID1xDQ%2BPovQSv6m2Fmicw%2BJ\"}]}\r\nset-cookie: cryptoex_session=eyJpdiI6ImliSmhUcXI5OEd6aEdUNmVEcjUxbkE9PSIsInZhbHVlIjoiSmxiMHY1dE44U0FiVVpXZGltTUk2WUxkc0dHTFhJZE5CSmkwcU54ekxmeTM1VWJ2QkpKS2RNdDdqbE1YS2E0UlBSN2JxR1FxNUdYdjBTRFB2RDJPQ25CQ2QrVEE3WHVMMGVrOWZVUkRDVlRlTHZFcU4rTWo2YlpuWm5pU2h5M1oiLCJtYWMiOiI0ZDExYmVmNmE0NjcxNDcwNDcxODM4MDgxODJhY2EyYjJlYTRiNTRlOGM5MmU4M2JlZmY1NjBhM2Y3N2NmN2JiIn0%3D; HttpOnly; Path=/; Max-Age=7200; Expires=Sat, 04 Oct 2025 23:42:50 GMT\r\nx-powered-by: PHP/7.4.27\r\ncache-control: no-cache, private, no-cache\r\ncontent-encoding: br\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9897d9f3df2eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"835a7aa484a912197bff28ef261145e6","sha1":"df92acc09697f16861c71b23aee5ebdded44dc83","sha256":"0161791fe4c2140d1397c7bd90e0532a4ba6bb5f9f69163bcad9e2c06a07404f","sha512":"b7dc7247b570a4c067c3eee9ba88c2cd2c1037074a4a6ccc0d3e61cb5a30d058381d2597a4d63e84ad4a040a59502296813cfb737af44d41dc3dbb8b0880b293","ssdeep":"","tlshash":"aa900282242a00828605108894088f49115461821400432a5d8e91218e5d1552142430","first_seen":"2023-04-13T08:27:30Z","last_seen":"2026-08-01T17:32:58.170732Z","times_seen":73,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/uploads/20250528/1b1adb33f7b022fec05770ac193e2faa.png","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /uploads/20250528/1b1adb33f7b022fec05770ac193e2faa.png HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48; cryptoex_session=eyJpdiI6IjFZQU5kWjZya2Rkb1pkcktDUGRrMWc9PSIsInZhbHVlIjoiQ2NsQXBleVNuTmFIdDJcL3MrT281ekxuXC83SW8yNDFlam53N3hocllxNjhPV2JlXC9cLzY3M1VlXC9GeXNmeHpRUlNYTmpCYVM4Z3pPV050RUVEc1ZRWnFuY2JlNmJscU96UmNhSUlYRFM0cEsyUVdqbWhrbmVtZHA5aHp3NkJRQ0dlRCIsIm1hYyI6ImIwODE5ZWZhNzNlMGM4ZGZlYzQ4YTg3NjNhODdjNjVmZTdiNDE2N2ZmMTVlYzZkNWU1OWMwOTRlZjU2MDI0N2IifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 31906\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: \"683aa383-7ca2\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgfanuZ3OBCJ%2BOcpGZqOh9uCN2d9yrURhugvt9FWLAUTYHcajd%2FzPbFEYvbFnJ8xBTMuntk0dOupcE%2BDV5jG4cQGLVmxRl4uD8Yki5j2dxNm\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9897d9f8af6db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31906,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1101x449, components 3","md5":"1976b03666d27342d3316d5091d2968c","sha1":"8d85155b63018f9eb6ffb0f44e2e1ff3e566c0d6","sha256":"df16feb31040a293f7032ff6250fdc87209f02832294267f193ab3da51047c4a","sha512":"1f34d6f86ba4c3658eec0e0858bff62492008df8fc5765a69733b95da0b76870ffa0bc571ea8c776c96a93f27ac6941e09eb5fff05f2ed245bcffae6b2f843cd","ssdeep":"768:CvXeS5Z0DhqlOWOE5Ca3iIR+OhFu1MA77Q8DW:QXJ8ofOE5Ca3THhwL77Ta","tlshash":"0ee2f15b9cd100b1e654d23e9327ee28bc94af39874c5df936b6727dcb80ae06039523","first_seen":"2025-09-28T13:10:30.812782Z","last_seen":"2025-10-04T21:43:17.599869Z","times_seen":4,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":624,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/tradeview/charting_library/charting_library.min.js","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:48.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/tradeview/charting_library/charting_library.min.js HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 21:42:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: \"683aa383-26ae\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDTxP1qfNO4zJWMSqg2h8Rnu5aMOm%2BW2Z0t7KgH0C4M68WbcbCQ%2FgeB875xQC2UBafSwPcWPhoiyewUlNM8bz9QJCYKGnTT6uIWFq5jPFbrwFRk%3D\"}]}\r\ncf-ray: 9897d9e78834a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9902,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9900), with CRLF line terminators","md5":"1b4daca49ae2c0225a9232dea2148df1","sha1":"fd3711c6a439061420442f2a57b0b3a2968d3625","sha256":"eed6506775e8d1fca20b61a590e91c42c82550d2befee83f5d08f163bae4b296","sha512":"259daa40d4b442672f4cbb730e8f148b3488ccd2d18db890875edc411bd093eda9a8fb8933dd2896915ddbdb0585d8bf3755c576d61375e780d68b3afec254ff","ssdeep":"192:9o937kYFUdQ+lr6lw2rfnJ8NRLP6tyPPv1id3Kuv/ISJhv+HIhJPh3F6R:StkYFUG+lD2rfnaNRLP6ty9iJKQ/ISJ0","tlshash":"90123258ed2479320acb40f4427f290f9235d278d84a44ed3c94e6ec59fd847a96fbb8","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-07-28T18:15:40.799488Z","times_seen":204,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/img/logo.f272b2c.png","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/img/logo.f272b2c.png HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 46763\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 May 2025 16:04:02 GMT\r\netag: \"683b2872-b6ab\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tnpvTbqvXY%2Bhho2xTbjv7eEtgdc3JpEw7R8gMPx1YbcrItGb5awlb0cBOvZKDSqlKr1GS4E7Y8P8oDNts65aMYEasSdmzZqi9osZQcOhneIE\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9897d9f39f1cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46763,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1389x1389, components 3","md5":"a724175e2c1132635f80715233fe7b61","sha1":"f356f5b15617de1a9ce2327d657d81f480e354bd","sha256":"b61e45d406b0c634cb4cc9160c437dfe0d9141d1d8f95ad75ad0414c11b453a5","sha512":"71887dbedef8b771213bbfcf2effac6e1aa547bd9d921465bebb08fcd97748206aae915ffafe47c1a2d9576db05b8ed181267f087a4213b5bcbf89df94487af7","ssdeep":"768:CVeyCyGVc7+XD+c0CPYBMCMuZMaAh1HzVso78uyUwoxlP6HXshqvIp:MeyCycNXD3PWMbHf5l7LMXGqvIp","tlshash":"5223e1e60b46db65d4980b73cde38b5ee7d76628eb96eb040085823517220f03d7d7ba","first_seen":"2025-09-28T13:10:30.794584Z","last_seen":"2025-10-04T21:43:17.602083Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":643,"receive":615,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/api/market/currency_matches","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /api/market/currency_matches HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BrL0VjtF3PVFD86SG%2BhdZ8kThjBMECF5cJptGFn1tyi3iLltN%2BqTHZPeIcKl8RNNf2gUuuEWCcV2YODWgrtrA8v7DKBzRXetVTpQc8cYiFC\"}]}\r\nset-cookie: cryptoex_session=eyJpdiI6Ing3OWZ3b3FSZm4yTElKc0JuU0dSMnc9PSIsInZhbHVlIjoibUlQSzB3U1JQNkE2VW5xYlE4SnVNa1dMaEZkaUtXYzVxeXJTQWwzZkZLdUJQNjhVbXhqWnd3NTgwTHRic2plSVBOd1JrN3FFKzdESW5CTDV0T2g2VUpPUVBsK2prSzhhdkxIZVIyTTNaZXdcL2JVVEJiMUYybUZhU203WlRWZmJjIiwibWFjIjoiODI5YzcxMDY2NmVkNzM5NGViMWYxM2M4NTc4ZGRiODg0Mjc1NjQxNmE3YzAxNjBmNmM4M2YyMzYwOTkxZGRlZCJ9; HttpOnly; Path=/; Max-Age=7200; Expires=Sat, 04 Oct 2025 23:42:50 GMT\r\nx-powered-by: PHP/7.4.27\r\ncache-control: no-cache, private, no-cache\r\ncontent-encoding: br\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9897d9f3df23b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":41572,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2ffc6c48baf65f71ccbdd91fd0efc59f","sha1":"5db350a899dac176f1a5999ce5a05f0fac244fa6","sha256":"7593eeb12bba186f6863bcdbe1b5ab761424b14ddff087a964f757082bbe1e3c","sha512":"2d37f5eeddc96553447a28beeffea0bb3e15ad4ec7f5d49a95472724b9f014689e2860bbc855abfade748be328802918c3855ab54e04620fb3f7bed1db0e7f32","ssdeep":"768:tY5Y9YY4YyY6YESdYgYtYLYyYpYQYaRCYoYFYbY6YiYI:tWR1Pfod9ma5C/M9gefrb","tlshash":"66036492323c0db9c5b29d80a7efb35924bd74b69cc5974cefec4a5b02ca6976407813","first_seen":"2025-10-04T21:43:17.603446Z","last_seen":"2025-10-04T21:43:17.603446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":299,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/fonts/element-icons.535877f.woff","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/fonts/element-icons.535877f.woff HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:50 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: \"683aa383-6e28\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YX0EA5qbxu2i2LrkDnoz7xedJ5%2BONbFijiSj4muCxK0a7Fgj89QYoX7hL6xB8aMnuzfkHgDc5uWo9Vlv1quCyv%2B4cU2w5kTm%2F63%2BZISWlYZu\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9897d9f3bf21b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-08-04T00:13:45.563209Z","times_seen":29310,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":620,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/api/news/list?category_id=26","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /api/news/list?category_id=26 HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSLnn%2BGCIO0ECPKidAWG40NuvRC9%2FUcPR4mG95HiB1TDYdz5UwdVloZhoCW8Rlva1mbQOxTZPdd87ig4X3bhxCWDFHqiZIz96OXkHuOCMFWK\"}]}\r\nset-cookie: cryptoex_session=eyJpdiI6ImJRajFNaElpRXdMRmJpald1ZW90NGc9PSIsInZhbHVlIjoiK0RiWnhCK0xXUVNEWVhRXC92Q2lFbDZGUDlVaTEyYkM2MUhKV2dEU2l5NVdKdCtUUlVCZzZhUFZ2dG5yNGRuQU80Nk9GR3UyQnRrM2RXV1hOODZkWXNuMXl4Y2k5OCtIMmg0QTNxNllGcUtyMGJTTUdyam5GMVBuR2FaQ2kyc01yIiwibWFjIjoiZTJlNTRlNmJhZDNiZTdhMTdkYjM0NDkxYzQwNDIwNGNiZjE3NTRhNWUxYjBlODAwZTc0MTQ4NWQyOGUwZDUxZiJ9; HttpOnly; Path=/; Max-Age=7200; Expires=Sat, 04 Oct 2025 23:42:50 GMT\r\nx-powered-by: PHP/7.4.27\r\ncache-control: no-cache, private, no-cache\r\ncontent-encoding: br\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9897d9f3df2cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58076,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"385c13911309fbac646980d2aa3d97c6","sha1":"85f23ebea0110b78e3f22dadd4b443f6276b0881","sha256":"450d8bd9bf855be743488ccf2c1382a558ec92a32e105240baea1d4a2d3eeb20","sha512":"d0a4df79595e4b852eeda0430c9c911d99b7221f1184963b9cc1dcbedf21ece5637cce2800ecfda0851ebb46231d244ec0fe6ae709d48dffe26f8131542f3983","ssdeep":"384:5bvgrhCKv41DGgG+lNlxL28vsMjX+K/lzhVyqlky/YJ59EHKgTBSf+yNdDS4UB8A:c4KgGgjiK7jwK7p8uGHGMvbj7mYz12z","tlshash":"7043e0696bbb42234176c5c131bb5bd77dd1602cfba16918aeac43cc52cdf3935222e2","first_seen":"2025-09-28T13:10:30.827547Z","last_seen":"2025-10-04T21:43:17.605621Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":605,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/img/exmobile.03a8b25.png","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/img/exmobile.03a8b25.png HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 59695\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: \"683aa383-e92f\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbyAYyD4XSyeIGmaJmHOthx9cj18bMVayIQBwCtI%2FvIigwir7TRvnpGM%2FXcxRq%2BmB%2FxkYcR4Om%2BLiIwaktWUGRpUhBBVyjNQ1zMTV6cw4N1m\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9897d9f3bf1fb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 244 x 508, 8-bit/color RGBA, non-interlaced","md5":"20b9986bb7971fd5cdd77ca021a49075","sha1":"49a9ac466029d9ae30ce9f46b4d728bb8f0edc81","sha256":"c5cafc12a8fdcd2f3edce7b356905327f1ccf63f2ad52c09f272b9b7d5a497f1","sha512":"f8a35eca512aa354018d090b60aff6106e09f813e5c20e2ecf432d2a337fa96b9e184bd21ca60e5d722d23bb91e156851e24e80adeed9acfb8f9e2953a3d43f5","ssdeep":"1536:zmB7CitYkSPTvG5LdNqafrKi2NTgo3qNjT7jLkSpKwT:qB7CithSPTvG5LdYafg5POT7jLkSL","tlshash":"e04302748ce159011907789e1c84ba299fb9f0ccc59984f9cd325e2917ac8beedcd9f4","first_seen":"2025-09-28T13:10:30.831102Z","last_seen":"2025-10-04T21:43:17.607126Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":617,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/jquery.js","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:48.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/jquery.js HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 21:42:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: W/\"683aa383-14976\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUjICCkHzVQaQ%2F7Np1O8J8Dyvl6SIR%2BOz0kDwe0fkwcUW52cjRv7pcKSL3UGDy9EFgb0An%2BumC7RQW45455GZhz7CsFEj7UoAQJghXDZnlmoP2U%3D\"}]}\r\ncf-ray: 9897d9e78830a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"9087a9859288a8b9e5275a823c2ace1e","sha1":"f2c621911b387b2a6399c08d05c7027653a9e072","sha256":"730fa28a30b20e876e67b0ceacc14ef814ade02fc3504d91435675f5e847f287","sha512":"e46f3420f05a12c3063df19a03689b6029d479230d03fddb5d2adc4abf655c795c3c1b3777fc3d6fc7a3cfbfee089ef19d5fdc925be73d5dbdc64524a1a253ab","ssdeep":"1536:GP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrA:Z+41hJiz6fhdlTqya98HrA","tlshash":"5f83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-02T00:06:12.694186Z","times_seen":248,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/css/app.31137602c105532d7a9e6009421acc34.css","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:48.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/css/app.31137602c105532d7a9e6009421acc34.css HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 21:42:48 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: W/\"683aa383-378e\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XX3RDFokMhF6oIMD%2F9g0%2BgUEA%2BFzuBo2YvU%2FA80HQkMS5DlbwzSbN9iIXKBkgIcuiWjqPs%2FtubPqMMjzYa4kUqxKQkvDBUyDZK1NdBUayAh3coQ%3D\"}]}\r\ncf-ray: 9897d9e78835a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14222,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14222), with no line terminators","md5":"57cd3ed306f215ccdcdbfc2d7672239a","sha1":"37129eb3b633c5a5c367aa4bb1e2bdd5d3586459","sha256":"b65f2a152a944d08dae56063ab2f16d387365d251554fac31d30f37daf3599d7","sha512":"0399c4a1e73a5acb5693a4ea8e95d1322ca2e34af061360c62cd12ce83b03e2e174d45a870f02bff2c85349e00bdb16e40c9f4d3a43f3b06460e0d60bd4de771","ssdeep":"384:fh0RGQTCpLyXg88aXIXV1IHpLPojwauOZ:ffQYyXTXIMpLPojt","tlshash":"5952c821f3ae142ab93bd66670d1ae887188a3579112077dfee0766ccd160c53a3339f","first_seen":"2025-09-28T13:10:30.793211Z","last_seen":"2025-10-04T21:43:17.609203Z","times_seen":4,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/api/news/list?category_id=24","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /api/news/list?category_id=24 HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRhdld9oN9b34%2BapqmyD3l0NjiRXlHA8MVHXqvB26%2FjeWte0ezXWtYwf3f2m6fkQ2HmkV8ocMfAKyo0luM2rqqXCODUoJkZpkwi7bbJtYqNc\"}]}\r\nset-cookie: cryptoex_session=eyJpdiI6InZMWDBDeEIyTkd3aXI5QW1ONmVCWWc9PSIsInZhbHVlIjoiODgrcFQxdVVDWlE3ODdzU1A0aGdid2JVaDJINm5mU0ZQSTlWUllLR05uOTh6WmhVNzZJTTRCRW80bGRkeHRuSEczUFU3V3g2N01zVVBuS2FNN3JTbk9UZW90eXlxS1ozK3V2eGM4cW9naVhXMDZOZU1HTmlkOWdmRE1yTm9ETVgiLCJtYWMiOiJkMDkwMzY0ZWJmOGFmYzU3OTc1ODAxZGUwNTAxMWFmZWE3YTk0MmMxNDY2MDk2ZjU2MmZlYjE4MjVjMTMxYzJhIn0%3D; HttpOnly; Path=/; Max-Age=7200; Expires=Sat, 04 Oct 2025 23:42:50 GMT\r\nx-powered-by: PHP/7.4.27\r\ncache-control: no-cache, private, no-cache\r\ncontent-encoding: br\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9897d9f3df2db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5898,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d4135bc3800226e940254f59a329b9d8","sha1":"74dfe94470735bd7b99939cfbe4022c7bacc5b34","sha256":"8d4fef36b48a9e87639e0606c13d1b85056b1d9dce4630720aa03df666b4d030","sha512":"1125920dc2abc0b4f7c0b7c5cc31c7da2642f86f64ccce499a98a3c4031847107e88bf714c55ee94476bba40ca7463281ac631d1a5c7ad7fca66bfbe95560a74","ssdeep":"96:h4Vi8VEFssssssfHsk3MGTgwTajadBJHTssssGOQsW53MEdessQEKsyssssssssB:ciO0ssssssPs0MO84BJHTssssG3sMMJ+","tlshash":"95c143edc79a87a3818501c528da6dcab4a4748963e28d8f07d8ce9c0197759cf772cf","first_seen":"2025-09-28T13:10:30.829509Z","last_seen":"2025-10-04T21:43:17.610654Z","times_seen":4,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/uploads/20250528/4541df855c7bf3c88fa73fd215e97d43.png","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /uploads/20250528/4541df855c7bf3c88fa73fd215e97d43.png HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48; cryptoex_session=eyJpdiI6IjFZQU5kWjZya2Rkb1pkcktDUGRrMWc9PSIsInZhbHVlIjoiQ2NsQXBleVNuTmFIdDJcL3MrT281ekxuXC83SW8yNDFlam53N3hocllxNjhPV2JlXC9cLzY3M1VlXC9GeXNmeHpRUlNYTmpCYVM4Z3pPV050RUVEc1ZRWnFuY2JlNmJscU96UmNhSUlYRFM0cEsyUVdqbWhrbmVtZHA5aHp3NkJRQ0dlRCIsIm1hYyI6ImIwODE5ZWZhNzNlMGM4ZGZlYzQ4YTg3NjNhODdjNjVmZTdiNDE2N2ZmMTVlYzZkNWU1OWMwOTRlZjU2MDI0N2IifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 37620\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: \"683aa383-92f4\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zEVBezJilJve8NmMVYYBuXQUKdeGvZJuoclquKgseGBksJ0VW%2FKkD2Fu9AujCuhwH4nnVIWeQ8jDNRdQdn%2Fb9sw2I0PCyZ%2BPEbiKQDbObV2\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9897d9f8af6eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37620,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1101x449, components 3","md5":"4e6ae967450e660233a02295db2a3ff7","sha1":"f9e61075b87cbe29ffcf60c57df43d20aa46d7aa","sha256":"567d891bb44f0cfafa86cb39d999209e84c2994c1beda165d5184ce2557f2229","sha512":"ce5534284079ea7142ab2b0f445446fadd9a720ba29d8c3a1fe1517714c3dc1d4c184ad232e60efe3f070b1d49ec3da372e5a15c6aebd5420bacca81ed77498d","ssdeep":"768:CpUmafWntEPy0yMfu/i1TeduDhF6BSj9vSFz3HKHel+uSFuKfxXlE31:B+taLzTguN1lSx3q+AuMZ+F","tlshash":"96f2f101b76eb6b9d8314c3755bb37419bb32c60076e958e42c45832e8de798bcb760e","first_seen":"2025-09-28T13:10:30.806705Z","last_seen":"2025-10-04T21:43:17.611363Z","times_seen":4,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":307,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"www.cryptoexvip.com/ws","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.cryptoexvip.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Owe2SpYyoIWd2qVqpFGF5w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 04 Oct 2025 21:42:50 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: G8/THd1R99KdixzSinbCuoA6K8s=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ASSiF8GGBYeiaASaH2enHMSCRvsWuXX6%2BvFa2vkHDD5CQwaeq6kq7YWfsQqNfXGUH%2FIGN1JBdqISzIS0KwQjDZNBQypUnAnrjD5AtngpQNuBT1odDvEBDEU%2Bs6luX65Ei9KefhGA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9897d9f3b8ba0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1436\u0026min_rtt=1294\u0026rtt_var=489\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2836\u0026recv_bytes=1218\u0026delivery_rate=2224270\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=24783eb333f3339d\u0026ts=631\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T00:30:09.488797Z","times_seen":17699594,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":0,"dns":10,"connect":11,"send":0,"wait":625,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/api/news/list?category_id=22","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /api/news/list?category_id=22 HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FTTdejKE64cGNGdTZKdvxbnobM2E8dGzvCPAgUlmaFRpy0cOO6xk7bLuYwuaLT2ucoHIUN629bQgU22vGymScNia4POeqxvXyTTMeorqiQ7%2F\"}]}\r\nset-cookie: cryptoex_session=eyJpdiI6IjZXTWRNTnQ0c2R5S2JQdnFmUVwvN1lBPT0iLCJ2YWx1ZSI6IlpsQ1FuZ2ROMUk2U1hNT2IzVU5TejFvbnJsb1JcL3VNY2dRWU15ZzVXak9QeFNkK3VRY1BaM2NZMU9IRHdhUTFFSVpkb0VINWxGc2U1eGplaENYVWJLTHdsbjVmeUZKTURBamdoOWxHWjU4SCtcL1I2OTlIRmhYZmtuaDVNWmo0dnciLCJtYWMiOiIwNjJkZjViMDk0MDkwMmIyZGEzNzBjMDEzYjY5NTVmMjhjODgzMDFlNmY3Yzg1MDU0ODNmZGM5YWE5MTllMTAzIn0%3D; HttpOnly; Path=/; Max-Age=7200; Expires=Sat, 04 Oct 2025 23:42:50 GMT\r\nx-powered-by: PHP/7.4.27\r\ncache-control: no-cache, private, no-cache\r\ncontent-encoding: br\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9897d9f3df27b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2251,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c797615cbd28069c3dfacbeeef057bb2","sha1":"b810ac462db9afb5c7a5fd2bb2d56936f7cb89dd","sha256":"aa6a4775fed63444023a5d328b1cfb819d054834544897841300cf4a25e4afea","sha512":"f333212ec987b30b8fea0e8f18f4f593c09747dd23ee708c008e20b7bedecff85ad0f5c899875e18bb48751633fb21a2b3aed692928975fa0cf0cd3077247e57","ssdeep":"","tlshash":"fb41978c9a8956d3824e00c53cb869c79e557fc6e3a34e6f23d98a8c02c765c1b3748f","first_seen":"2025-09-28T13:10:30.837326Z","last_seen":"2025-10-04T21:43:17.613439Z","times_seen":4,"resource_available":false,"data":null}},"time_used":931,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":931,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/api/default/setting?key=contact_email","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /api/default/setting?key=contact_email HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGl%2F9zetwFCdNh0MNAeJXvtDdcMFbxaoI4iu5YM5oGh7awOabvrT0LELuRzHEbKya%2Fn2NVHU6vc%2BhqMOeMN1aIyByDa6XbzPKwuMS8WOWm4F\"}]}\r\nset-cookie: cryptoex_session=eyJpdiI6IkJWVUYzdWZTRDlVRHRiNEdxYjRcL3h3PT0iLCJ2YWx1ZSI6IjV6TWwzUDJuSkNlc0RYYjZDVlpGb0JOdHZvbjlcLzBYRXp4XC94SEN2ZU5cL1g0UklKdllqbGlsaml1WXhpMElUNDJRU08ydHN2ekxCV0pNZzRicU5NSlBNXC9ENGM3SFwvaWRCZnVLZ3NETzZUZ2M1QjNjY3lCM0R4OUR3SEloQjN5TTQiLCJtYWMiOiIzM2YyZTNiZDczMmM3ZTcwYmMwZmRhNzI0MjY5ZGQwMzg2MGVhZTMxNzkyMDUxZDRjYTIwMzkyYTMwYjRiN2Q2In0%3D; HttpOnly; Path=/; Max-Age=7200; Expires=Sat, 04 Oct 2025 23:42:50 GMT\r\nx-powered-by: PHP/7.4.27\r\ncache-control: no-cache, private, no-cache\r\ncontent-encoding: br\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9897d9f3df2fb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"831c5be54fc63e2568c56c6f2285222f","sha1":"2c6b542441dca95b3a9f4a74f4e12d2c32e6eef6","sha256":"51c6dae847e18891af3467abe8fdc2b87f9f497e91a8b2a73c07e78d72b674e5","sha512":"1e878cf0790d097cdab2e1273ccc223ff836e74caadf614575e2f6a34d72d0b761b14703756911bed2588a81a1dda328f134f79e57fa41fb41759923456c9ac7","ssdeep":"","tlshash":"a4a02282380b208383080008b838cf0c002c20822800833a8fce82338e8c800300a030","first_seen":"2025-09-28T13:10:30.802728Z","last_seen":"2025-10-04T21:43:17.614882Z","times_seen":4,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":874,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/uploads/20250528/26ab0329114830892a7276839b970fec.png","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /uploads/20250528/26ab0329114830892a7276839b970fec.png HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48; cryptoex_session=eyJpdiI6IjFZQU5kWjZya2Rkb1pkcktDUGRrMWc9PSIsInZhbHVlIjoiQ2NsQXBleVNuTmFIdDJcL3MrT281ekxuXC83SW8yNDFlam53N3hocllxNjhPV2JlXC9cLzY3M1VlXC9GeXNmeHpRUlNYTmpCYVM4Z3pPV050RUVEc1ZRWnFuY2JlNmJscU96UmNhSUlYRFM0cEsyUVdqbWhrbmVtZHA5aHp3NkJRQ0dlRCIsIm1hYyI6ImIwODE5ZWZhNzNlMGM4ZGZlYzQ4YTg3NjNhODdjNjVmZTdiNDE2N2ZmMTVlYzZkNWU1OWMwOTRlZjU2MDI0N2IifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 77090\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: \"683aa383-12d22\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HwrddPcxfKtk%2BVj3xHn1CEcyvGBVZ6%2BfLuFSk8i%2BNyLNKBor8ePzpZN8rrKLvmoaSoLLW%2BHBRw0%2FFhSPpSpHpjjSVHKZBVduQ3kS87t8Vb6R\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9897d9f8af6fb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77090,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1101x449, components 3","md5":"f9a91c7fca39b9f38bc9e3a6bc9cd424","sha1":"3fb397ac04ee3165704267b51fc1d15f5e17ee53","sha256":"9025ccbbea4b8178bd8410b4cde12621abd8189339953afcd676563c4b8f7543","sha512":"07dc48c777bc2c9b33ebad4b0d2f61d6269eee088b7b329722e41a09bb2a5f455085e0f3c3d11a0815b719eb7a24f603613302865d34039467cf929f2c4cdd11","ssdeep":"1536:7NxcZDnM350Cc+gjmCjFxr5wij3RMQCN2Bz2VnW4yOFu/Uvza0RCby50gfgH+r:7/cZDnMpLg1B15wpx2BJ4xoUvFRaymgD","tlshash":"947302e37ea25505d402d3f36c4e0de5f339df79a248929ed1807e27c0ac56728b6b4a","first_seen":"2025-09-28T13:10:30.790676Z","last_seen":"2025-10-04T21:43:17.616256Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":612,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/img/logo.f272b2c.png","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:52.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/img/logo.f272b2c.png HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48; cryptoex_session=eyJpdiI6IjZXTWRNTnQ0c2R5S2JQdnFmUVwvN1lBPT0iLCJ2YWx1ZSI6IlpsQ1FuZ2ROMUk2U1hNT2IzVU5TejFvbnJsb1JcL3VNY2dRWU15ZzVXak9QeFNkK3VRY1BaM2NZMU9IRHdhUTFFSVpkb0VINWxGc2U1eGplaENYVWJLTHdsbjVmeUZKTURBamdoOWxHWjU4SCtcL1I2OTlIRmhYZmtuaDVNWmo0dnciLCJtYWMiOiIwNjJkZjViMDk0MDkwMmIyZGEzNzBjMDEzYjY5NTVmMjhjODgzMDFlNmY3Yzg1MDU0ODNmZGM5YWE5MTllMTAzIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 46763\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 May 2025 16:04:02 GMT\r\netag: \"683b2872-b6ab\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BX8eVPsTpzgTUyGCpzLQYZc7uXmYqILUy6GQjpvEkglt2ikFWnMSPJopQP2Q12pvJvcsVUIGckBZcgO2J5fqeaUjCuNMEad31QwJMYdMMRpf\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9897da01cfaab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46763,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1389x1389, components 3","md5":"a724175e2c1132635f80715233fe7b61","sha1":"f356f5b15617de1a9ce2327d657d81f480e354bd","sha256":"b61e45d406b0c634cb4cc9160c437dfe0d9141d1d8f95ad75ad0414c11b453a5","sha512":"71887dbedef8b771213bbfcf2effac6e1aa547bd9d921465bebb08fcd97748206aae915ffafe47c1a2d9576db05b8ed181267f087a4213b5bcbf89df94487af7","ssdeep":"768:CVeyCyGVc7+XD+c0CPYBMCMuZMaAh1HzVso78uyUwoxlP6HXshqvIp:MeyCycNXD3PWMbHf5l7LMXGqvIp","tlshash":"5223e1e60b46db65d4980b73cde38b5ee7d76628eb96eb040085823517220f03d7d7ba","first_seen":"2025-09-28T13:10:30.794584Z","last_seen":"2025-10-04T21:43:17.602083Z","times_seen":4,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":497,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/js/app.2a30389728ed6e79e25e.js","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:48.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/js/app.2a30389728ed6e79e25e.js HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 21:42:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 23 Jun 2025 18:19:45 GMT\r\netag: W/\"68599ac1-1408f9\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0PO%2FQugXTeu4UY%2FKMtMuH053H4RoaPI6nUT5BlkLkt5MCedzjzwdAYHuN2nnKfeMNgO4jfuJIF5%2B4hBaXFWjLde5D%2BmA04%2BdPb94VvLXOk2Wic%3D\"}]}\r\ncf-ray: 9897d9e7883aa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1313017,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (58073)","md5":"f18479302b4c8ecb759fcbd204ecc0d4","sha1":"58e058a954d03628e29ae3c0dbf55968d4729701","sha256":"04924dead2377539b3cb3f72dd8edb54c7f703add5f7074b93ccb8b44157a294","sha512":"5c5dd6e32780f3ade450b26b4a7505575f62466b0633e21c218ec2fbfeabe5d5ed3bf87a22d9f24a013ec35256c4b2b3f994aab757ecb546925ea4e8f00355aa","ssdeep":"6144:oYfBQXEP9brirfj+W+1+6+J+a+W+Z+++F+W+1+6+S+W+8+6+eXuOHOFOUOC20GOI:oCQX6ri0j0VpRmw4o+DV","tlshash":"2425e7028b7720318267f17c999b28887b38835b8c667d28bf5c45988f5d42d52f7bbd","first_seen":"2025-10-04T21:43:17.61774Z","last_seen":"2025-10-04T21:43:17.61774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/html/static/css/dark.css","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /html/static/css/dark.css HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cryptoexvip.com/html/\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:50 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMAJB4YOAhHU9cGEtnm4o2JI5dRhSWwNpiBrqYEJOYGEAQaiX%2FSbuUEPGXIKMZHqQU%2FfY6ym96WPhoq1tmpI5QRVly3z6nVVvZivX8DXk7j0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: W/\"683aa383-b94\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 9897d9f39f1bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2964,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"76d094bd56bcfa2606f84956f773c097","sha1":"a9edcc028d8bcf6a4325a560275d87fd31ee88ee","sha256":"7db8d9685265994fc363d153b082cb21e8949140869cf45180e473fd7afb99bd","sha512":"1cdd0ed60d36b5f62ec82a86d9a766ac750e2f585065a451aca9c7bf305ade68f632684b3ea7f053fc9a2e0b3b230e3167a20767e30fdbd7425ab88cbbbff0fc","ssdeep":"","tlshash":"5c51f7fe9979280e2b338bbf6219d9553f5962fb88070326bfb362355534ed44835d40","first_seen":"2025-04-14T01:22:53.685619Z","last_seen":"2026-04-21T09:37:59.299209Z","times_seen":24,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptoexvip.com/uploads/20250528/1503e1925fb3a0ecd32b03755b0bcc3e.png","fqdn":"www.cryptoexvip.com","domain":"cryptoexvip.com","tld":"com"},"ip":{"addr":"104.21.20.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cryptoexvip.com/html/","date":"2025-10-04T21:42:50.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoexvip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 14:37:21 GMT","end":"Mon, 22 Dec 2025 15:35:46 GMT"},"fingerprint":{"sha1":"1B:0D:31:4C:3A:62:11:98:9F:DF:CC:44:6E:B0:FE:15:F7:20:43:7C","sha256":"68:49:5D:12:EB:09:7A:F6:6F:01:DD:F2:AB:ED:D2:EC:11:D3:8E:EF:3E:9F:34:23:9A:9B:3B:5F:78:7D:DE:63"}}},"request":{"raw":"GET /uploads/20250528/1503e1925fb3a0ecd32b03755b0bcc3e.png HTTP/1.1\r\nHost: www.cryptoexvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=49d46d6122d975f57728fbc4345d4e48; cryptoex_session=eyJpdiI6IjFZQU5kWjZya2Rkb1pkcktDUGRrMWc9PSIsInZhbHVlIjoiQ2NsQXBleVNuTmFIdDJcL3MrT281ekxuXC83SW8yNDFlam53N3hocllxNjhPV2JlXC9cLzY3M1VlXC9GeXNmeHpRUlNYTmpCYVM4Z3pPV050RUVEc1ZRWnFuY2JlNmJscU96UmNhSUlYRFM0cEsyUVdqbWhrbmVtZHA5aHp3NkJRQ0dlRCIsIm1hYyI6ImIwODE5ZWZhNzNlMGM4ZGZlYzQ4YTg3NjNhODdjNjVmZTdiNDE2N2ZmMTVlYzZkNWU1OWMwOTRlZjU2MDI0N2IifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Oct 2025 21:42:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 63541\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 May 2025 06:36:51 GMT\r\netag: \"683aa383-f835\"\r\nx-cache: MISS\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CLI%2FXoWG2kp6GJfiBZLq8qCZ5sPH6D%2BsZpUkz4MjayDfySBSJxJfNeHEY4gJMHdEMI%2FxQAjUyjA19g%2F9UoJ27wC8SrrGZJcftoGUfZuGxaMR\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9897d9f8af70b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63541,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1101x449, components 3","md5":"31f4b6a035ca8f8c1ff9a4b11861767a","sha1":"d5b4d8f23bf078a8274ea4138e48f78a1a468799","sha256":"19501df3dfbba2250d9f9d29e654fe18ba9459255114bac6717e770a86f71fdb","sha512":"b78dc35541f9dc2b2238d8a65f6df5b58a409d2adcc35e7f0dad94351a28972cee2cc989d58507ef965662f16bb7fbe11d9040b9af212e25912cdc51a0782346","ssdeep":"1536:Yw9dHjIWBXYX3vjT0Fwp8FbCa1vUH6gfRLI+VybJbp6:Yw9dUz/ju/Uaop5qV6","tlshash":"c753dfd4f8400ad4ceae8bf49c42815bc58944a0afb3f92c1e073e91f556f5cd627799","first_seen":"2025-09-28T13:10:30.804034Z","last_seen":"2025-10-04T21:43:17.619592Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":620,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"www.cryptoexvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}