{"report_id":"639696ac-68e7-498d-af1a-715f7aabcad8","version":6,"status":"done","tags":[],"date":"2025-09-22T13:08:53Z","url":{"schema":"https","addr":"www.okx-cex.com/","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.okx-cex.com/","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"title":"欧易｜欧易App官方下载入口｜苹果IOS｜安卓｜PC端支持"},"submit":{"url":{"schema":"https","addr":"www.okx-cex.com/","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-27T13:08:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.okx-cex.com","ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2025-09-15","domain_rank":0,"first_seen":"2025-09-22T13:08:54.465881Z","last_seen":"2025-09-22T13:08:54.465881Z","alert_count":20,"request_count":20,"received_data":991432,"sent_data":9102,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/jquery-3.6.0.min.js","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4411d1d7748be90b66da1c96b9b14037","sha1":"5aae6635a7eef0c979539101733381f393b3d8e7","sha256":"7ec0c0211e76d535b25d16815206ac45ec350b1597fc67656821be4ae6354ee4","sha512":"b3eddc9b3720fb34a786ef3205d52c5d5f504a054012d4930c29124ec245a953ec9930f9317c533bebb7ab896218d55477c6d949363111d10b30b030b18d1e4c","ssdeep":"1536:hqbRLi9gxGFs+4Ezy4bx60BWnDkWeA/7biQKnff8cCfEEaJmbyBZ1NOE5p3+/Yn+:CCsbiQKnffQDbkjjpixuyJV","tlshash":"c69319ddb2cab06347a770ba00bf550bf2361899684d4410f125d8e9bc78b4a927bf7d","size":89546,"data":"","first_seen":"2023-03-08T02:24:20Z","last_seen":"2026-08-07T22:27:13.98498Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7a8aed225a45b4afa81de9833a004bf","sha1":"113eda558a4b97d8e44f62073e7b3ddfaff7ba00","sha256":"801c17d578320fa4d3d0d147b202fe89675e12f3bba5495c9586dea49a46cce2","sha512":"a539a85409047bc8ddf1068c62ea4214b3d2e57b2dd137ef386a7d8d81515d8ec9a8c8b22cb385adcfe32d0e0164fa864ea2d26d613714d6dec9e67edcdb9ef2","ssdeep":"","tlshash":"e8f0a76f3bbd197116abb93b166ee38d35384047240a9b4d3d3c8ad44f60e651422985","size":464,"data":"","first_seen":"2025-09-22T13:09:00.386993Z","last_seen":"2025-09-22T13:09:00.386993Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/faq.js","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac3d7b15b2002f80e26bae324a58465b","sha1":"404d3a901fafd12ea52425751bf269127d096c58","sha256":"711e2614b948fa638288ffb2516e2363c5fc9c7102ee98f12d85b24161837478","sha512":"067c6e835ada4b414d646cbd156f31272e07bc3c007bcf5e70c092d989925846046ac59622955e568075d3f48a7cbb2e81d38526007d6070c8f9222d0e2b4090","ssdeep":"","tlshash":"f2c08c8efa08f1eb42ff35f1087f900472a22cca4a8cc014b0ba01480ccc11a1152f3d","size":157,"data":"","first_seen":"2025-09-22T13:09:00.369367Z","last_seen":"2026-07-26T05:00:54.598728Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.okx-cex.com/","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-22T13:08:31.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 17 Sep 2025 04:51:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca3e51-19cd2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105682,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (439)","md5":"69d4870466ec154bfd1880dbfcf35ff0","sha1":"8a8568974c009ca498de66df30250ca45536efe5","sha256":"2ed43e12b523381d2df325fcfa59b056e596ff122353a1e4b9d37f3f93a22d3a","sha512":"1eae2c332b53e1bb1cb0a33d34698e2d69d6c35c9312865ea7f6fcc4eb9f80ebc5f6c61cce0b77dae0f4bcb66e1fb5bce4843dbe84083f282a8ceea7491e8976","ssdeep":"768:lFCFfFUoK67QlsZto4X33pJKAk74PG32wNt97SUzEHF:lYlaoK67QlsZa4X33p0U+32it97SUzQ","tlshash":"d4a3ccb545e8693701ab909a5a31831f2a59da0bc94b4749b7be87dc1fd3c86cc3f848","first_seen":"2025-09-22T13:09:00.352047Z","last_seen":"2025-09-22T13:09:00.352047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":468,"dns":45,"connect":208,"send":0,"wait":213,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/lightning-fast-connect-1.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/lightning-fast-connect-1.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Sep 2025 16:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989b8-1d07\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7431,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc21d474ff964558c483f23e27413f18","sha1":"e3c7e2444651121f15535fe7e39005dd437c4e3f","sha256":"b373e50048b504c1db4061ee9971ecf588b0f54f7e96732bf298018a10e2bbc5","sha512":"7eff2f9bec4184c68c6d7896e6d3ea6dfd8d04ae8fe7fd7dac16a2f0f62dcbcbfcf6d176134007afb093a088682b6bac413c7ef974cea37a0e3a12cac6885599","ssdeep":"192:9RCyxIlzUQP744+bcQNyYRcay7tcqOcQmg6BWznBKAu38FFChTemz:9EyqlzUQD4HTNyYRlyh/OTf6m9zChTeq","tlshash":"41e1c9c927b4b3b8a9cb9f5def39a8e8710b34fc36661984c21d5b4435c2e8dd544c94","first_seen":"2025-09-22T13:09:00.354318Z","last_seen":"2026-07-26T05:00:54.60109Z","times_seen":4,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":751,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/app-banner-qrcode.png","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/app-banner-qrcode.png HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Sep 2025 16:01:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989be-1e91\"\r\nexpires: Wed, 22 Oct 2025 13:08:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7825,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 210 x 210, 8-bit/color RGBA, non-interlaced","md5":"f9a6829589ec20a6bc8bb4d6c9d4046b","sha1":"4e6111328e92fce26ed9b3e999bd804e6bd311c6","sha256":"0e1fe93bf408850074b00058aaa08658bf4cf58b04c7b5d8b469a5aeaf016d30","sha512":"34590bf36b6f3304a5c6febaa4b195c46232c194cc2359705b6fb7166d22928dec6bf04a60cd64ec8f9a6ecdc8fbd465dc4f2c9eb27b2c1ac7c198c4ef130d52","ssdeep":"192:FxC8KGVlip5Bb9IYKCXia1021lGZwhYUP6W1BfaX:FxusLYKAia62KZwhYUycBs","tlshash":"03f18ec3f4d08491ca04b94b7cb662be97030d919701fc6725a6c9374ca3afe7059296","first_seen":"2025-09-22T13:09:00.356068Z","last_seen":"2026-07-26T05:00:54.602438Z","times_seen":3,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/static/sprite.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /static/sprite.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 17 Sep 2025 02:49:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca21cc-1f3d6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":127958,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f120069026a8c7a63f66ebc312563d2","sha1":"1be7b657cd7c39f18c9ebd90d1104067f038aa67","sha256":"17db3a3686e380319ddc51c8000e7c2b18b05dc375aaf633bfae9a7a3c6ca87f","sha512":"fea390cdb1b6d1e55a254e2a43a7577ee6d0724f7fa7e2c42cce94d0a365ca4f76b2b077d0d5e8ac3d5e231df89f5b696ca67f587a4912db1cd5004acf53a743","ssdeep":"1536:9T2qr9ShB58awkZDyCoU1v6ah6mXFcvz52GUT91Vkn2Xe1LIAqs/UF5slSDw9HPF:esawIttv6a0F8TN81RIlqCVF4","tlshash":"d5c361d61734d2c8b4cecc6def3ffdd4242bb4aa76a640c552aaca48848f9d1f945c90","first_seen":"2025-09-22T13:09:00.357904Z","last_seen":"2026-07-26T05:00:54.611015Z","times_seen":3,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/static/picture/apple-touch-icon.png","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /static/picture/apple-touch-icon.png HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 19 Sep 2025 03:22:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68cccc68-64d\"\r\nexpires: Wed, 22 Oct 2025 13:08:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f56dfcd7273c032cec8d6dd901fa1ae4","sha1":"05da955967dfb82710268c92cdb5937193a8e32c","sha256":"49228171571114ac7ea5f55125de52e94bf9b1fa23815b06f2e52128d5724526","sha512":"73682e5d590a4e0268092c59a05c0632e3f1fc86378929e97eb318f7ce8815cf7f2e64b4c8ba0d36d9486541c6a11627da4aa60af431c06f5047d7eea7e270ae","ssdeep":"","tlshash":"6131ea73540eecf78bcb44617056eb41d6ad75d8f57230553d0960386975a1c134a87e","first_seen":"2025-09-22T13:09:00.359945Z","last_seen":"2025-09-22T13:09:00.359945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/fonts/app-banner-background.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /fonts/app-banner-background.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/index_files/global.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 131\r\nlast-modified: Wed, 17 Sep 2025 03:17:39 GMT\r\netag: \"68ca2853-83\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b03bcb831eb16c06633467275e0d483","sha1":"6d1eb79b3e27b4e1801188a4df21080a899f67e6","sha256":"4dfd4309f3d5afb9cfc00a72bf89e34c03286adeb09e518c87bea9a567c66269","sha512":"f65021bf4a14666976a955b6e8efb2b98f8849ba9dbe7b357a66fb43269d2eeff7f0c952d7accdd76e7a114bf432bc7817ce675d5a8a32595b9974d8cdbb66e5","ssdeep":"","tlshash":"80c09279f3ccdc08c618860a9778d8a45203f0a9c399025dd6c83581a008ce3be3169e","first_seen":"2025-09-22T13:09:00.361547Z","last_seen":"2025-09-22T13:09:00.361547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/jquery-3.6.0.min.js","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/jquery-3.6.0.min.js HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 16 Sep 2025 16:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989b8-15dca\"\r\nexpires: Tue, 23 Sep 2025 01:08:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89546,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65445)","md5":"4411d1d7748be90b66da1c96b9b14037","sha1":"5aae6635a7eef0c979539101733381f393b3d8e7","sha256":"7ec0c0211e76d535b25d16815206ac45ec350b1597fc67656821be4ae6354ee4","sha512":"b3eddc9b3720fb34a786ef3205d52c5d5f504a054012d4930c29124ec245a953ec9930f9317c533bebb7ab896218d55477c6d949363111d10b30b030b18d1e4c","ssdeep":"1536:hqbRLi9gxGFs+4Ezy4bx60BWnDkWeA/7biQKnff8cCfEEaJmbyBZ1NOE5p3+/Yn+:CCsbiQKnffQDbkjjpixuyJV","tlshash":"c69319ddb2cab06347a770ba00bf550bf2361899684d4410f125d8e9bc78b4a927bf7d","first_seen":"2023-03-08T02:24:20Z","last_seen":"2026-08-07T22:27:13.98498Z","times_seen":117,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/mobile-wallet.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/mobile-wallet.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Sep 2025 16:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989b8-1c367\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115559,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f7a6db3657997efc83de4e1623dcd24b","sha1":"0c67ddc9acf765561a6c45ef4ce21d598ea56e01","sha256":"f550e1b65bcff590f86086ab5ddaac66dfc2ce2ee530489a12e404dd4975f600","sha512":"fd5662388279ec2542af1e6bdede72b301d6300d8e29932c1745bfdcf487b15d4f5a84b8658a8e195d022500b84db2b484ee374db9b45ab67555698758efd982","ssdeep":"1536:6VPtWxV0tuDgKgnW7L4CrwuS6QXZ+Wo6UFV:b","tlshash":"dab333d6123827bdb5c487bc502621263e6b7cdb77b18710f78e4f35ab058f944a8da2","first_seen":"2025-09-22T13:09:00.363708Z","last_seen":"2026-07-26T05:00:54.620361Z","times_seen":3,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/lightning-fast-technology.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/lightning-fast-technology.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Sep 2025 16:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989b8-2a97\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10903,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"68faf4b984d4e59634bd960734442b68","sha1":"8218b15171942b91f25850182a433f4f9db8b215","sha256":"fa71123c1e7a0ccc8d8468e3bad2ea650e3eac986da401dcf587273ab00468ef","sha512":"8cae5fc6677397af38179061d19050c56728c4e24a28feb58f4852e080c1873f477707a53d63de5143ba008dbf555a0ee47a4f46688ac6167bd9dcce19a8a214","ssdeep":"192:J2GpELbLTjSsVck11Qu5xbRMk5ZWOcJVYp7/iR+0TVDE3rdXWBo:Jl6LXSsVckbBLRjzvWmVaR+0TJcxXso","tlshash":"b822b6d69770e2b09cc387bdef196c68251a74fe3f758388866c5a04add3a8df908d40","first_seen":"2025-09-22T13:09:00.366353Z","last_seen":"2026-07-26T05:00:54.614337Z","times_seen":4,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/app-banner.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/app-banner.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Sep 2025 16:01:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989be-2225a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139866,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b98097294ce1668ee84e65c3d9235ae3","sha1":"7b1435bd5e9cc20f085f176b6086e2f0b7c0b4d2","sha256":"a05afcb125b3af1736bad20963570c3de5e1f456d21c062190768323cbc418f4","sha512":"55433bd47c031479da83b96f1f303c082604528d5c6c9126347fbd6760c2b5a4c3555c3210238aba4c422fe709837097d98e0445ecc7587f21f35ccc5ea15bb5","ssdeep":"1536:x5gYP3L7+t+wyYc6OuSdPjcitEEr2l/MjzxVOFz0URaW:S","tlshash":"39d3ead851bc43feb4026784183929963a6728ff75319588b5ce7d8bdb090ec498dcba","first_seen":"2025-09-22T13:09:00.367637Z","last_seen":"2026-07-26T05:00:54.615593Z","times_seen":4,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/faq.js","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/faq.js HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 157\r\nlast-modified: Tue, 16 Sep 2025 16:01:02 GMT\r\netag: \"68c989be-9d\"\r\nexpires: Tue, 23 Sep 2025 01:08:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"ac3d7b15b2002f80e26bae324a58465b","sha1":"404d3a901fafd12ea52425751bf269127d096c58","sha256":"711e2614b948fa638288ffb2516e2363c5fc9c7102ee98f12d85b24161837478","sha512":"067c6e835ada4b414d646cbd156f31272e07bc3c007bcf5e70c092d989925846046ac59622955e568075d3f48a7cbb2e81d38526007d6070c8f9222d0e2b4090","ssdeep":"","tlshash":"f2c08c8efa08f1eb42ff35f1087f900472a22cca4a8cc014b0ba01480ccc11a1152f3d","first_seen":"2025-09-22T13:09:00.369367Z","last_seen":"2026-07-26T05:00:54.598728Z","times_seen":4,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/home-head.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/home-head.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Sep 2025 16:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989b8-24b25\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150309,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d051a777de7ace3f478d8a34c8bbc45","sha1":"514ba802f31aed8ecc435705c15d020a6b935536","sha256":"d227cb48c771ae48af3c5729622870f1b589477fea05d7c3806a425ea54b7222","sha512":"f6a29446339b902b1c2f46e5bf42e1cf954ce717ae6009cc48def2bf96fb8c1f09b575958e898f935ac710a2ae1e25129753d92389f009d5049c9dd9f55ee4e3","ssdeep":"1536:ymcRhHGcBs9btWBoQh4h3axpTTpog2BnAi2wSl4FQbbqAKFBAfWX:yvoik","tlshash":"d9e373dd167d03fdf9801bd8202220563b669cab9a25c294fb9f8e74af158fcc4b5c61","first_seen":"2025-09-22T13:09:00.370754Z","last_seen":"2026-07-26T05:00:54.619369Z","times_seen":2,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/global.css","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/global.css HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 16:00:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989b6-97c2\"\r\nexpires: Tue, 23 Sep 2025 01:08:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38850,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (38850), with no line terminators","md5":"6dfb17985ece571853da8b15a6dd5d3b","sha1":"cf6c91646c9bc0fef266cda294f88d6bc19e7f7e","sha256":"5c6096b628bbee1030697994c11feb75705562218709a221f76fa1ac8a5a2815","sha512":"7e7a961ac0eb6b2e8f828ef46f6b4eed653382bb81b11be15bd12292979406d4ef9b159f05baafa0aee80311d8c3c45d55d6ddbc1e69cb9a6880593ea64de7ef","ssdeep":"768:ZhKEXODHrmdEImIqoJyD4aBpvjPFXYTV2lJj3w5fZItJhLD8nMSFRufch:ZhKEXOrrmdEImOEDlJ85BIsMSV","tlshash":"e903a6325720292fa1179e2557b086f9b124c406d75387fe9ad29f08c7f7ab50b7f288","first_seen":"2025-09-22T13:09:00.372336Z","last_seen":"2026-04-08T21:07:09.541618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/desktop-wallet.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/desktop-wallet.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Sep 2025 16:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989b8-19dd4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5bd07092b727623555b59e031030021f","sha1":"5496e6d94de64eb01acb2668cb69938d63179769","sha256":"ba9f33cb898b9c3753bf4b0837aa0f2bd7f9efd72760b8200a14781da6c83ad8","sha512":"b6a3df4309a837186aa2230046fb7ad81338ae7266a2910dd8cec67f3ed9e887ff9624bc0b6bdb5d264a55556cdcef2c94eb22a72e1635842763cff50c442c3f","ssdeep":"768:mNQwoAuQvcEQYBJbBeschteG4zrrUh1usv+9ynucf8oJKcG4HXsyhWjSX9LrSE8Z:m3Ux8fzI1IytqJyhWjSXtriQ0","tlshash":"afa341f621ad4fd2d4d5ebd9daa3ccb17d8605eb8a208d4fb29d6650af130ec908dc41","first_seen":"2025-09-22T13:09:00.37346Z","last_seen":"2026-07-26T05:00:54.607508Z","times_seen":3,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/images/fort-image.jpg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /images/fort-image.jpg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/index_files/global.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 03:44:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca2eb3-9d0f\"\r\nexpires: Wed, 22 Oct 2025 13:08:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40207,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x600, components 3","md5":"c4fab5e855dac632d0305e785dde53b8","sha1":"11911cc26e05e3e749a4011491d0ca0276651854","sha256":"bd8ed4e919cf7359a1104bf7ab7a5d96b22f0b88c9d940a6608581ded3a1fd21","sha512":"189cccace596f55ee0b962ea80e482b7a939f00058a6101f1b46f84a8f01bb61cb0d5c2b2c3b927c2599c5e36f589b038e042ee412346242b4c41e7179e1ae8a","ssdeep":"768:90CC4nePPP2vvvvgj+jrjjwjj+FY6iWsDssNsHsFss6ssNsHsFss6sC/WRj7jjEb:90CC4nePPPXj+jrjjwjj+FY6jj7jjEjP","tlshash":"7103fe1b4d485b83a42d83e4bf075e6d2b252b8ced857aff611a0ecb7eb05151d8e01e","first_seen":"2025-09-22T13:09:00.374688Z","last_seen":"2025-09-22T13:09:00.374688Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/okx.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/okx.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Sep 2025 16:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989b8-1708\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5896,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dcaafac5d0f63b63f16a67568fb93de8","sha1":"eedf39a301e71d9cc3fa100a419f04fc90d01ac7","sha256":"814425c685d14415525505d4907234b0cc4e4ca6eb054e225dde907e8aba1b6b","sha512":"6cd63a6d77e4a0f02de6db9724a4c202034a355ee89a3e70f7bb487772f05e13293d870727f2facdddc69baad4a446b508552593da7e40a8a12001b3310e74b8","ssdeep":"96:/koIanLX2eFvYfLsGr8Qg/M+gJAHgJrVVvXtg8Bh9:/kHeWYGr8QmMhDbV","tlshash":"dcc16241f7bdbcd8e20f01704df0b605aa2920a347a01a54779c4950efa36e1b369fdb","first_seen":"2025-09-08T08:03:23.762962Z","last_seen":"2026-07-26T05:00:54.600049Z","times_seen":11,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/badge-apple.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/badge-apple.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Sep 2025 16:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989b8-1d42\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7490,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fca729d66ab622c2b15f0ac8690e50d5","sha1":"b5c6fed3250d4c8c76e6ad41262e26865d292df1","sha256":"824079f5ed305ab069fcb2bbfab8b3f1d7bb5e81d0e715b36adcaf7b9524f675","sha512":"f8f874820b4e0438d748682916c7fd789643ab195a0dc6728ed0e3a8ad9f30657e0e9d6e91587f77f70bf89fbc80db4cffec27e0b814c3742be9ea149c17f180","ssdeep":"192:wEfSIXeXblvwAitH7PmKosPdQb6KwXNV8CanLQz:wEfSO9KKf1X9SCgsz","tlshash":"64f155ea673096cc79df5d4fff26afa8520e70bb79f685c1655aca24d083d84e640c00","first_seen":"2025-09-22T13:09:00.377635Z","last_seen":"2026-07-26T05:00:54.612097Z","times_seen":3,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/download_Android.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/download_Android.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Sep 2025 16:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989b8-59c7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22983,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f09a2fb4956f9d83c86893bf6ff61982","sha1":"13493822b2c4f6a8e22b27f11704ea0d53917a35","sha256":"82dd606f4677fe4ef19db311ce51251eae5dc3fd3044c3ab80f67ff6d8b9d72e","sha512":"4c1f5bed5a16c41fa3c085b1f3e2a44137f8fb757af55907fe5ec579162b96bbe30a03a9dadbf6293d39bd01b7c56c8c6cd73ccbc57c0aa5614c49f540f35448","ssdeep":"384:aHtih6JEHNfmQ4QVShoj+MNJTpOB8UEiXMSNitfDE7dCND:0tsVQfqdOUbOsJ","tlshash":"7da209cc037c9ff5b28567cd283618543ba234feba91d6dce16e9e562a024f4851cc6b","first_seen":"2025-09-22T13:09:00.381251Z","last_seen":"2026-07-26T05:00:54.613281Z","times_seen":3,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/index_files/lightning-fast-connect.svg","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /index_files/lightning-fast-connect.svg HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Sep 2025 16:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c989b8-bc6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3014,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"791ee88bbcc297c0e986f73ae717a51e","sha1":"75a4d777ccade04e1e43bbcd8334fc71e4ce3a78","sha256":"55f0b88d677c60a8596a883e74eefd4552ff3c7e376110a53afa701bc092fde6","sha512":"e3bc861d4201e0fd63b2b9a452d67b8e7a9c282427ca08f1fbd8f358d4c05c34dda274159059a6aa3672b5391068e251a4cf81b005e0e82a2c51cf7018d97378","ssdeep":"","tlshash":"8a5134cca7a0f2f09c84d3feb3246419359627bd2771ca08cd691ed8a543f8ddaea451","first_seen":"2025-09-22T13:09:00.383392Z","last_seen":"2026-07-26T05:00:54.608549Z","times_seen":4,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx-cex.com/static/picture/favicon-16x16.png","fqdn":"www.okx-cex.com","domain":"okx-cex.com","tld":"com"},"ip":{"addr":"198.16.35.94","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.okx-cex.com/","date":"2025-09-22T13:08:33.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx-cex.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 15:43:43 GMT","end":"Mon, 15 Dec 2025 15:43:42 GMT"},"fingerprint":{"sha1":"C1:ED:08:41:A0:F9:D8:44:E9:CB:DC:72:85:9D:D0:C1:A6:E1:D5:01","sha256":"14:0F:29:5C:73:34:2D:EF:A9:37:92:31:48:6B:D4:68:7F:94:FD:FB:61:AA:F1:DC:A0:D4:56:9F:85:3E:B5:38"}}},"request":{"raw":"GET /static/picture/favicon-16x16.png HTTP/1.1\r\nHost: www.okx-cex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.okx-cex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Sep 2025 13:08:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 618\r\nlast-modified: Fri, 19 Sep 2025 03:22:17 GMT\r\netag: \"68cccc69-26a\"\r\nexpires: Wed, 22 Oct 2025 13:08:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":618,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"d1ee86474dfe31c1553d0943501520db","sha1":"4bc40c4bfb38cf533629a73c29f791d6e2ce5ad2","sha256":"023d54044b4258575c72e10d0dd80990f048b9759725bc03c57ce7c2cd4e52b4","sha512":"445cc3c0025ef84e61edd77c174ae7adb58d7714d004475cd4e82b9b77c72ba418e4900536f20d37c5be4480c39b8119e54cbfef88752724115dcbd9e987fdb5","ssdeep":"","tlshash":"bef068e2258f48b8dcdf615e623d0986be231ccf04d06714bd1ed887cdba066d5c1356","first_seen":"2025-09-22T13:09:00.385002Z","last_seen":"2025-09-22T13:09:00.385002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"www.okx-cex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}