| GET www.kucoin-pol.vip/images/daimai.png |  34.87.6.171 | 200 OK | 3.9 kB |
URL GET www.kucoin-pol.vip/images/daimai.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 432 x 324, 8-bit colormap, non-interlaced Hash0016662060f5defa9e118e54a25c8e9c 9d1d33e77d764d58f13676d1363215604a3d73f0 cc83e44d83170019de1bf4ae45b2c72ed1570c302db019853d8c167c0c893745
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/daimai.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Sun, 10 Nov 2024 23:14:42 GMT
vary: Accept-Encoding
etag: W/"67313e62-f49"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/anquan.png | 34.87.6.171 | 200 OK | 5.3 kB |
URL GET www.kucoin-pol.vip/images/anquan.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 360 x 360, 8-bit colormap, non-interlaced Hashabee68ec515f881f97e44ddffa087fe8 0f8c6c6970a59b7f15202b1378e43ab796372a7d 3be2e6ed777af7b76516fa31e717079f616855ce1c0e5d750b035ae063afe0e3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/anquan.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Sun, 10 Nov 2024 23:43:06 GMT
vary: Accept-Encoding
etag: W/"6731450a-14d3"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/service-faq.b1bc46a2.svg | 34.87.6.171 | 200 OK | 1.2 kB |
URL GET www.kucoin-pol.vip/images/service-faq.b1bc46a2.svg IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeSVG Scalable Vector Graphics image Hashcc97f465059bae4c64aeb0205b13d700 e06efffacc1e4a0cf8a9ffaf8cf4f37043fbec9e f6b69f5aca0b7b77d4748fa1a30cb0f835f3905164b98761e6b42065e312a92c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/service-faq.b1bc46a2.svg HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/svg+xml
last-modified: Mon, 11 Nov 2024 22:18:08 GMT
vary: Accept-Encoding
etag: W/"673282a0-486"
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/cms/media/5Kh7qnUWP84dRb8uBkMP6xBrXqsIdLw8zQrMBLl6b.svg |  54.240.174.28 | 200 OK | 2.3 kB |
URL GET assets.staticimg.com/cms/media/5Kh7qnUWP84dRb8uBkMP6xBrXqsIdLw8zQrMBLl6b.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash7cc9147262437690bcf23e3bf19533e0 8b74db8b89efc65f340fa440a698d091476a2c68 d532ebd19becca1dd59d159befa86bb309ea9a094cd03d86a64b8492b3cca55b
GET /cms/media/5Kh7qnUWP84dRb8uBkMP6xBrXqsIdLw8zQrMBLl6b.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 20 Apr 2025 19:05:19 GMT
last-modified: Sat, 25 Mar 2023 10:02:33 GMT
etag: W/"7cc9147262437690bcf23e3bf19533e0"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Zg7IDZ2EOdxxWrxm6Jc9O3X8mUDYDw9WoQ8YveOZ7SOBpptEKqnwzQ==
age: 4895104
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=getInit | 34.87.6.171 | 200 OK | 79 B |
URL POST zq.goingogo.com/api/index/ajax?action=getInit IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash4e21036b44e2afda9a166125048500c3 cee4f78e02c96cde1eb65d81cc816e6d99b4be3e 42a486a06d1b52bd94272e1ee941e3df89376eb1b1383749f824a2d5293abe15
POST /api/index/ajax?action=getInit HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 2
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 86 B |
URL POST zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash42ceefabdda3263b16ee737c5c722b95 9ef70320bdbe4c92419986999fcd1bdbb023cc68 cebb4aa9fa1b3e69f54f79934d320b18768bf240447ee892d3d187c02657e65a
POST /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 56
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 86 B |
URL POST zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash2108ff63ffe1883a5900bcae41a9570d 8d7a686fd6219615aecff681448c975e0abba833 f2b664be46c25149d9e154dddcf6ad2004643c9c13f6f9d44b7b6a241a3b20c7
POST /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 56
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:25 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 34.87.6.171 | 200 OK | 530 B |
IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeHTML document, ASCII text Hash0506ea8c7341cf60f3e042c63a010c66 61e522fffe61243ad658f0b49c292ad58d0d9746 dd4db463ae4058d30ae6815948c517e6ef0f3ef400bd014bd0a72831e3e987e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET / HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:20 GMT
content-type: text/html
content-length: 530
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
etag: "67e5af98-212"
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/en-google-4d5ea678.js | 34.87.6.171 | 200 OK | 14 kB |
URL GET www.kucoin-pol.vip/assets/en-google-4d5ea678.js IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeASCII text, with very long lines (14185) Hash7a871aca40e7b6eb1ee229528e6e8231 e11b594a88e4a56e5f8124a43125b100bdf70a39 227d16fd25d75d56da5f9dc152b43db70cf6ef2a7c87e8c32d74a6e7a209e726
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/en-google-4d5ea678.js HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kucoin-pol.vip/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:21 GMT
content-type: application/javascript
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
vary: Accept-Encoding
etag: W/"67e5af98-376a"
expires: Mon, 16 Jun 2025 22:50:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:24 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:25 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:25 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:28 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 183 B |
URL POST zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hashf4d334deda7f06095335a7d447f3cf52 060860e0e85f8a27baa448f72d9f59d05b7b9b49 355a1b2c80f9f0b6653c7921ad6da97d12bec427d91dc72b78be594baaf36a72
POST /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 59
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:30 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/index-d468abc5.css | 34.87.6.171 | 200 OK | 243 kB |
URL GET www.kucoin-pol.vip/assets/index-d468abc5.css IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeUnicode text, UTF-8 text, with very long lines (65496), with no line terminators Size243 kB (242893 bytes) Hashdbde661ee9ed101b8b6bf1f04f996087 3cb75cfe082b4f8b34bee19f74d1981db25fb7bb d468abc54f4df38016a1b98b199a069df8bb482cbf2960bc868388ea3e133c18
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/index-d468abc5.css HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:20 GMT
content-type: text/css
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
vary: Accept-Encoding
etag: W/"67e5af98-3b4cd"
expires: Mon, 16 Jun 2025 22:50:20 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/index-c57c965d.js | 34.87.6.171 | 200 OK | 610 kB |
URL GET www.kucoin-pol.vip/assets/index-c57c965d.js IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeJavaScript source, ASCII text, with very long lines (64848) Size610 kB (610420 bytes) Hashdd961711473e68ee1f2a44b51e9de038 0b134308d4a150c843e79c3e7eb20f19e0278b43 deba8b68f683a9031d899e697490d72427a90a4762d975c9246838093ad855f8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/index-c57c965d.js HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:20 GMT
content-type: application/javascript
last-modified: Sun, 15 Jun 2025 15:51:52 GMT
vary: Accept-Encoding
etag: W/"684eec18-95074"
expires: Mon, 16 Jun 2025 22:50:20 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/kcs.png | 34.87.6.171 | 200 OK | 9.7 kB |
URL GET www.kucoin-pol.vip/images/kcs.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, interlaced Hashc7d1ac08436011ae1918535438f48470 4b98b45b2e3e263366c428a2ab9e4df281e4ea26 93d6cdc6c1a21b1126caa3930d4e3946352b8a57903e6a0b40f1396cc44cbd69
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/kcs.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Wed, 19 Mar 2025 06:40:14 GMT
vary: Accept-Encoding
etag: W/"67da66ce-25e7"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/kcs-41e14a1b.js | 34.87.6.171 | 200 OK | 42 B |
URL GET www.kucoin-pol.vip/assets/kcs-41e14a1b.js IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
Hashf40329475b189f958a4a557cf3260471 121c3867346126ca06ae45294c2c1fedbd45dbd4 ce78334066d2daf179c741f62e1f0f61bc44de5f5349a29da868a2270c4dc0e8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/kcs-41e14a1b.js HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/assets/Homes-1682c6d8.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: application/javascript
content-length: 42
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
etag: "67e5af98-2a"
expires: Mon, 16 Jun 2025 22:50:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/quickstart-bg.e4c12ac2.svg | 34.87.6.171 | 200 OK | 5.6 kB |
URL GET www.kucoin-pol.vip/images/quickstart-bg.e4c12ac2.svg IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeSVG Scalable Vector Graphics image Hashf1751431414c41503f89049fd919fad4 192bae74b858d2730311a74d94be4b264d7503c0 b6ae178b4af56585965ccdb9032a0bed0a14c059466cc0a28c5d39f385f98d6c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/quickstart-bg.e4c12ac2.svg HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/assets/Homes-eae8978c.css
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: image/svg+xml
last-modified: Mon, 11 Nov 2024 22:13:42 GMT
vary: Accept-Encoding
etag: W/"67328196-15f3"
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 183 B |
URL POST zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hashc9d7119497c9f6849cd8834ea38cedd7 c34240087f91f5d025f76dd48c1bf710e830924e 0363945d9df919d6bd3569a97adb80ca1482e0d8b35a5c1df845d5361b2cfbed
POST /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 59
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:25 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:27 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:31 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/en-google-4d5ea678.js | 34.87.6.171 | 200 OK | 14 kB |
URL GET www.kucoin-pol.vip/assets/en-google-4d5ea678.js IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeASCII text, with very long lines (14185) Hash7a871aca40e7b6eb1ee229528e6e8231 e11b594a88e4a56e5f8124a43125b100bdf70a39 227d16fd25d75d56da5f9dc152b43db70cf6ef2a7c87e8c32d74a6e7a209e726
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/en-google-4d5ea678.js HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/assets/Homes-1682c6d8.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: application/javascript
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
vary: Accept-Encoding
etag: W/"67e5af98-376a"
expires: Mon, 16 Jun 2025 22:50:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=lang | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=lang IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=lang HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/BTC.png | 34.87.6.171 | 200 OK | 14 kB |
URL GET www.kucoin-pol.vip/images/BTC.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, interlaced Hashee20b709a2249aeaafe63879a7c0bec8 3c8db65aec6ef0c9d4365e473219bffae436b5f0 c9c7e4619e62e36be7d453cbc444432aafc16678c50c12706fa522d45fe63556
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/BTC.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Wed, 19 Mar 2025 06:39:06 GMT
vary: Accept-Encoding
etag: W/"67da668a-3566"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/cms/media/8DPboei054vWXAK0eza6FzwR74dpbIiNasH0shcsj.svg | 54.240.174.28 | 200 OK | 1.8 kB |
URL GET assets.staticimg.com/cms/media/8DPboei054vWXAK0eza6FzwR74dpbIiNasH0shcsj.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hasha429f3a430455edda5a265456b4aeb7e 2aacda461eb8344a4561faefeb075b1fb42828e7 7e598730e01dcff2c37cad8479207f086f625bf847f826e60b941a36edd44550
GET /cms/media/8DPboei054vWXAK0eza6FzwR74dpbIiNasH0shcsj.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 26 Mar 2025 20:31:04 GMT
last-modified: Sat, 25 Mar 2023 10:08:04 GMT
etag: W/"a429f3a430455edda5a265456b4aeb7e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yUowFxRCJIaoxbuRq0rQE3cL8XZxbpuYoy6m3PA6vQRrT6AgiuuWbw==
age: 7049958
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 86 B |
URL POST zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hashfcf73b1f389a5a4e84320c80435a3f90 f3e31d6b1b368cbf1ec2c4f10e5be1de32833244 d7a0bb7523b877ca13d91bd62f6a55dd7a03af48dc063e2fbd6e20f122f5f19c
POST /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 56
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:28 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/loading-37cc19e2.js | 34.87.6.171 | 200 OK | 55 B |
URL GET www.kucoin-pol.vip/assets/loading-37cc19e2.js IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
Hash0d03c77980ee06855403391e8c55a353 8e27025666d2dfdce58aafd42d730c539e0011a9 a1044bab4909b18b713632801bbe7b0d83a40a094e76b0f80db348b4e4314fde
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/loading-37cc19e2.js HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kucoin-pol.vip/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:21 GMT
content-type: application/javascript
content-length: 55
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
etag: "67e5af98-37"
expires: Mon, 16 Jun 2025 22:50:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/cms/media/7FrX3cTqcJIDYxenJCHZEtVoL3mBzbzMSvYNu1Apr.svg | 54.240.174.28 | 200 OK | 1.4 kB |
URL GET assets.staticimg.com/cms/media/7FrX3cTqcJIDYxenJCHZEtVoL3mBzbzMSvYNu1Apr.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash0766075f4ed93f31bf82aa881b2ad987 ab462ab6b6c36f496a5714cedb3a7ce807ce2cd4 a96107e180f6c30e6336d4ee46c7a44f7cd84aaa7f0c6194951ba5bcef627549
GET /cms/media/7FrX3cTqcJIDYxenJCHZEtVoL3mBzbzMSvYNu1Apr.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 26 Mar 2025 20:31:04 GMT
last-modified: Sat, 25 Mar 2023 10:06:16 GMT
etag: W/"0766075f4ed93f31bf82aa881b2ad987"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 16Lj4MI6rWlgObtW6k5OeWku8GopKei_fakrzX3sTQGhqVwqqTr2GA==
age: 7049958
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 86 B |
URL POST zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hashfa7989ae5b311d53b0a49d8c35759c6c bc4d9f0e94547aba0edf28f71cbc97f94b3fc008 3aac1095212730cae29aa919068747f480fb1c197a4f46a724ef4e4ad2073cbf
POST /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 56
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:31 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/Homes-eae8978c.css | 34.87.6.171 | 200 OK | 69 kB |
URL GET www.kucoin-pol.vip/assets/Homes-eae8978c.css IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash14d07423b0da97ff45cc2b25beec50f2 5021415b4ddfa7c7f4f54171d357a33bbaaeb730 eae8978c62f7ed7920957fc3ac76f711b2fdf453e197c5ee124dc11105a312cb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/Homes-eae8978c.css HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:21 GMT
content-type: text/css
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
vary: Accept-Encoding
etag: W/"67e5af98-10e0c"
expires: Mon, 16 Jun 2025 22:50:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET wss://stream.binance.com:9443/ws |  52.197.206.97 | 101 Switching Protocols | 0 B |
URL GET wss://stream.binance.com:9443/ws IP52.197.206.97:9443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerDigiCert Inc Subject*.binance.com FingerprintDC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43 ValidityFri, 13 Dec 2024 00:00:00 GMT - Tue, 13 Jan 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ws HTTP/1.1
Host: stream.binance.com:9443
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.kucoin-pol.vip
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Ni7/mcdw/pqrJteh+JGx0g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 16 Jun 2025 10:50:24 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KsdbGJNmJbUMpZ/z0F9tT27xHM4=
Sec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover
|
|
| GET assets.staticimg.com/cms/media/7gp38Hy1Y4sNmQhwEL2Befbfjr0Ed6aaZVk8mhKo8.svg | 54.240.174.28 | 200 OK | 2.9 kB |
URL GET assets.staticimg.com/cms/media/7gp38Hy1Y4sNmQhwEL2Befbfjr0Ed6aaZVk8mhKo8.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hasha5e0a224f247d182f4a327cb63139e97 c599577668472d97e1f9b84d673f049623f651d9 66ca7f83545e730dc4e8100357c5d76aa9c5b837129df78124aee24bd831f1ea
GET /cms/media/7gp38Hy1Y4sNmQhwEL2Befbfjr0Ed6aaZVk8mhKo8.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 26 Mar 2025 20:31:04 GMT
last-modified: Sat, 25 Mar 2023 10:07:02 GMT
etag: W/"a5e0a224f247d182f4a327cb63139e97"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jNl4KhLUt0oSgry42yEUCf69c9h3sICwQAI3n41YuXbNY703AZ29eQ==
age: 7049958
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 183 B |
URL POST zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash08e5532a3d962e7007ccbeef3645d0d0 b48d22b595d1e324048809d11cd3d8e5211ff4b8 b0fff7dfd8d6d0dd69e964e97765e13aed39d0884504045313fd6f906ad7616e
POST /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 59
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:37 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/TON.png | 34.87.6.171 | 200 OK | 12 kB |
URL GET www.kucoin-pol.vip/images/TON.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hashbe7b79ad29fbaf9f3977ac8c90a09a62 1a21e916e7dae156efc15355c108a65d382449a6 2df3b5fb056bc1bef676d3c35033814981f38bb5e23a39c071f0b98e79cef438
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/TON.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Wed, 19 Mar 2025 06:40:56 GMT
vary: Accept-Encoding
etag: W/"67da66f8-30ed"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/chucun.png | 34.87.6.171 | 200 OK | 4.8 kB |
URL GET www.kucoin-pol.vip/images/chucun.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 360 x 360, 8-bit colormap, non-interlaced Hash4bea57a06c79e60fdd7f3528e6055146 41bccdc4810847602c83933fdcc2b041c157d3a9 9412c35037f94fadc36b7f07dfe66f6196f3b63369de18c01dd23b8d0f0d3a93
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/chucun.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Sun, 10 Nov 2024 23:42:50 GMT
vary: Accept-Encoding
etag: W/"673144fa-12a0"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/g-biz/externals/2022-06-01/d5deb39b98d1eacb.svg | 54.240.174.28 | 200 OK | 504 B |
URL GET assets.staticimg.com/g-biz/externals/2022-06-01/d5deb39b98d1eacb.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash7a99d6e70a0e4beadbdcbfea1f48e9c6 d5deb39b98d1eacb409838111115ced23a1cf745 82196b9ad1d273efa6c691238f76350238509e67ff6e2e71a3fe139f9e1f115e
GET /g-biz/externals/2022-06-01/d5deb39b98d1eacb.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 504
date: Fri, 13 Jun 2025 02:41:24 GMT
last-modified: Fri, 13 Jun 2025 02:25:02 GMT
etag: "7a99d6e70a0e4beadbdcbfea1f48e9c6"
x-amz-server-side-encryption: AES256
cache-control: max-age=604800
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: B8oZd15O0NMzNpANlno0VsFNxVyfErQmg9nzb4rK4O5KahvgrBj57Q==
age: 288539
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=lang | 34.87.6.171 | 200 OK | 78 B |
URL POST zq.goingogo.com/api/index/ajax?action=lang IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash7c878d288ef7df476c4c5154bdb290ad a071c659429475a9128cc4090095a304aa304fc1 4371155ac3758d09158108ac0f4f751b2fc6d1e540792e14a5a7f4108c01a3d6
POST /api/index/ajax?action=lang HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 27
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:33 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:36 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:37 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/_plugin-vue_export-helper-c27b6911.js | 34.87.6.171 | 200 OK | 91 B |
URL GET www.kucoin-pol.vip/assets/_plugin-vue_export-helper-c27b6911.js IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
Hash25e3a5dcaf00fb2b1ba0c8ecea6d2560 7850b3fd4aeb69387bdb5a60025d15c41351d5eb cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/_plugin-vue_export-helper-c27b6911.js HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/assets/Homes-1682c6d8.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: application/javascript
content-length: 91
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
etag: "67e5af98-5b"
expires: Mon, 16 Jun 2025 22:50:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=getInit | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=getInit IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=getInit HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/index-bg.png | 34.87.6.171 | 200 OK | 15 kB |
URL GET www.kucoin-pol.vip/images/index-bg.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 750 x 740, 8-bit colormap, non-interlaced Hashdf2b67348b24536febcda9a9153f0a14 c258cc9a392b6b208e2534711235ac1c6187883f 2ee75561fc2f490e68601ba7e12c18d119b160881b06b2427b4521bd20cd3ecd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/index-bg.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Sun, 10 Nov 2024 20:18:26 GMT
vary: Accept-Encoding
etag: W/"67311512-3a52"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 183 B |
URL POST zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash635f90628ee1f0b0ab76aebadbac2464 084fb92d1e67b8ea6eb597ea101f9e37a56034ba 018b8112db84bd5a80807fbc81b27aff70d1c17534c198163d23b072b82d65b7
POST /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 45
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:24 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:28 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/brisk-web/1.1.6/svg/download-ios.9d6a3943.svg | 54.240.174.28 | 200 OK | 889 B |
URL GET assets.staticimg.com/brisk-web/1.1.6/svg/download-ios.9d6a3943.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashc6ff73c249d0384c6fbf59d5e36b3909 f2053b754f972113ad238fa706ab0f6f7e5c8c1c 32978ccbc48d287ec69153eb8dd4c5fa0bf81d4b7e6a5e6bb92ad3b72f400e60
GET /brisk-web/1.1.6/svg/download-ios.9d6a3943.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 889
date: Thu, 12 Jun 2025 19:10:09 GMT
last-modified: Mon, 04 Nov 2024 04:17:15 GMT
etag: "c6ff73c249d0384c6fbf59d5e36b3909"
x-amz-server-side-encryption: AES256
cache-control: max-age=604800
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4M4gSK4ExgvycJ8KtdTQuTqyTzoX4vlW7z_FS9_A2YWhKPlARantuQ==
age: 315613
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/cms/media/4qUnZHTHJ0Tbb2mjJyM9Qb4vYBkqeP6DYdDbZkQdx.svg | 54.240.174.28 | 200 OK | 1.4 kB |
URL GET assets.staticimg.com/cms/media/4qUnZHTHJ0Tbb2mjJyM9Qb4vYBkqeP6DYdDbZkQdx.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash0136d722637281ac9e54d2ff190d253a bff138078c483580a8476f3442bde698da9ce2f6 a1b9dcae77d6fe6189b5a7b02f4ea06d1b4c0515495e515cc48f7f8e24103c86
GET /cms/media/4qUnZHTHJ0Tbb2mjJyM9Qb4vYBkqeP6DYdDbZkQdx.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 26 Mar 2025 17:15:41 GMT
last-modified: Sat, 25 Mar 2023 10:01:38 GMT
etag: W/"0136d722637281ac9e54d2ff190d253a"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cY1s-CvRc5-agx31hyx3_pmyYZo6iIU2pso3kvEIK7N1cs7Yd6d8fQ==
age: 7061682
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 183 B |
URL POST zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hashf8a3c1dc27f322854717eb54e28f87b2 c2c1599cda647bfb4d0808bf2e7572baa936aeb4 5300db0bc5a3a76c691b865865d294aa4b54408ce15c4b89d60a017feb39dc9f
POST /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 59
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:33 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/Homes-1682c6d8.js | 34.87.6.171 | 200 OK | 92 kB |
URL GET www.kucoin-pol.vip/assets/Homes-1682c6d8.js IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeUnicode text, UTF-8 text, with very long lines (65530), with no line terminators Hasha7bc6f70f26905b2974a7d45f3c88e5a ed51c39bd0f8c8cb592b6b6777d4f5254f33dd00 0def16c081d55014ed917a4e6273a1ed396f2785eab7295f46689b706589e42f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/Homes-1682c6d8.js HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/assets/index-c57c965d.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: application/javascript
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
vary: Accept-Encoding
etag: W/"67e5af98-1656f"
expires: Mon, 16 Jun 2025 22:50:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/loading-37cc19e2.js | 34.87.6.171 | 200 OK | 55 B |
URL GET www.kucoin-pol.vip/assets/loading-37cc19e2.js IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
Hash0d03c77980ee06855403391e8c55a353 8e27025666d2dfdce58aafd42d730c539e0011a9 a1044bab4909b18b713632801bbe7b0d83a40a094e76b0f80db348b4e4314fde
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/loading-37cc19e2.js HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/assets/Homes-1682c6d8.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: application/javascript
content-length: 55
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
etag: "67e5af98-37"
expires: Mon, 16 Jun 2025 22:50:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/S.png | 34.87.6.171 | 200 OK | 1.8 kB |
URL GET www.kucoin-pol.vip/images/S.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash6a09fa061d65ef9c0c622a2945235788 d3a48b84dc355abdaa86d18b3de9bcd4ee52115c 61739ce26771ce2bca0d5fd8d7ecf6091a843302a9029a1a1cf4f763dcfcaece
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/S.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Wed, 19 Mar 2025 06:48:10 GMT
vary: Accept-Encoding
etag: W/"67da68aa-736"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/brisk-web/1.1.6/media/765dd1ff21911627b452.png | 54.240.174.28 | 200 OK | 4.8 kB |
URL GET assets.staticimg.com/brisk-web/1.1.6/media/765dd1ff21911627b452.png IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typePNG image data, 360 x 360, 8-bit colormap, non-interlaced Hash4bea57a06c79e60fdd7f3528e6055146 41bccdc4810847602c83933fdcc2b041c157d3a9 9412c35037f94fadc36b7f07dfe66f6196f3b63369de18c01dd23b8d0f0d3a93
GET /brisk-web/1.1.6/media/765dd1ff21911627b452.png HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 4768
date: Thu, 12 Jun 2025 19:10:09 GMT
last-modified: Mon, 04 Nov 2024 04:17:14 GMT
etag: "4bea57a06c79e60fdd7f3528e6055146"
x-amz-server-side-encryption: AES256
cache-control: max-age=604800
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T4zw-lsHYGky1S0USqVceFoJq5ahRMpUZ9RO4h0AKvesNfREWA7nxw==
age: 315613
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/cms/media/5IegGYISdX4Tlp4NQ0t2m3QqpQU5WERUkdFQ2UJpR.svg | 54.240.174.28 | 200 OK | 694 B |
URL GET assets.staticimg.com/cms/media/5IegGYISdX4Tlp4NQ0t2m3QqpQU5WERUkdFQ2UJpR.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash8e62e080528d83445262871b76f2ea6a 2b82e5c5e7dfd386ea5d7c77a40130fa136d2724 91cba102860fd28c666d46475ab2dfbcd7e2ea8c7dba8c54b253f29bee88acf9
GET /cms/media/5IegGYISdX4Tlp4NQ0t2m3QqpQU5WERUkdFQ2UJpR.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 694
date: Wed, 26 Mar 2025 20:31:04 GMT
last-modified: Sat, 25 Mar 2023 10:02:29 GMT
etag: "8e62e080528d83445262871b76f2ea6a"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GJ52SIKXw28mleKNXJpd1f1BYeVVJTHYUnSsMB2JgQMH4ZX2ABaSjA==
age: 7049958
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/BinancePlex-Medium-774f97c9.woff2 | 34.87.6.171 | 200 OK | 65 kB |
URL GET www.kucoin-pol.vip/assets/BinancePlex-Medium-774f97c9.woff2 IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeWeb Open Font Format (Version 2), CFF, length 64896, version 1.65 Hash76f6a2ff18dd294b29174963a9bb40a4 c6eb8e9ab368d2836808d771defa093a128dfc63 774f97c9687c03c187b227a2cc5e0a26700d18c5d9624ea5d995154c8b117db7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/BinancePlex-Medium-774f97c9.woff2 HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/assets/index-d468abc5.css
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: font/woff2
content-length: 64896
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
etag: "67e5af98-fd80"
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 86 B |
URL POST zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hashd959a7ee0020a724f5c10c9b4058fcec 135f70c132e3ba44c83cbe90409646bd7f51b8b9 78f2de76a75ed96491b53ce7dcb59be71eefbfff7f73566f9cd2e3e3a8a6a75b
POST /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 56
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:34 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 86 B |
URL POST zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hashcd694ee93b8c9855cdf069a7941a441d ceef89bc13fb3da6c2e3606c3759c82805a3f1e9 13ad76445906b6e1150df678170091ac1d7af9cf2318d0abfafa6181255cece8
POST /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 56
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:37 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/kcs-41e14a1b.js | 34.87.6.171 | 200 OK | 42 B |
URL GET www.kucoin-pol.vip/assets/kcs-41e14a1b.js IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
Hashf40329475b189f958a4a557cf3260471 121c3867346126ca06ae45294c2c1fedbd45dbd4 ce78334066d2daf179c741f62e1f0f61bc44de5f5349a29da868a2270c4dc0e8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/kcs-41e14a1b.js HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kucoin-pol.vip/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:21 GMT
content-type: application/javascript
content-length: 42
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
etag: "67e5af98-2a"
expires: Mon, 16 Jun 2025 22:50:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/jiqiren.png | 34.87.6.171 | 200 OK | 4.4 kB |
URL GET www.kucoin-pol.vip/images/jiqiren.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 432 x 324, 8-bit colormap, non-interlaced Hashee1d69a6895ea483e5649f4103558696 68216d4b789334961b367bcb354684886f08ee43 9131ff554a3c3c5f513fda778a2b13fedfde1bee9b972a46c6c9c65e98def241
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/jiqiren.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Sun, 10 Nov 2024 23:14:16 GMT
vary: Accept-Encoding
etag: W/"67313e48-110c"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/qrcode.jpg | 34.87.6.171 | 200 OK | 30 kB |
URL GET www.kucoin-pol.vip/images/qrcode.jpg IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 240x244, components 3 Hashae7f0ae8d142a4d8ed4cc839ad4d9f21 ef7a7e614342487e9dec0fa3bd02dc65f3c172a3 745750f52648dfaf69a63b066fc406d608947506d5309e94446e6a30b5e6722c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/qrcode.jpg HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/jpeg
last-modified: Mon, 11 Nov 2024 21:35:22 GMT
vary: Accept-Encoding
etag: W/"6732789a-7538"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/cms/media/62PGFqwGrRPu92xdy0XM6Vz5XjxNTILnXjGGxINcu.svg | 54.240.174.28 | 200 OK | 546 B |
URL GET assets.staticimg.com/cms/media/62PGFqwGrRPu92xdy0XM6Vz5XjxNTILnXjGGxINcu.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashb492bf4b3c6c9cfc1fa7ebc8e514a9cf aa508d4e67d1a66f80527fe829dab173a6351203 91ccdff3d8341afa8028225d3c77d07aa9b81c5945745ba1e44986ecaafd71c7
GET /cms/media/62PGFqwGrRPu92xdy0XM6Vz5XjxNTILnXjGGxINcu.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 546
date: Wed, 26 Mar 2025 20:31:04 GMT
last-modified: Sat, 25 Mar 2023 10:03:54 GMT
etag: "b492bf4b3c6c9cfc1fa7ebc8e514a9cf"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2pXmqg7FQaPcum0PTiquH_rhd5RVJ01f41A84tmcSckoTX48rowRTA==
age: 7049958
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 183 B |
URL POST zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash387fe4daec7de317de2fb3a1070fa09c 34efde49b9f9217a0c55dc92ecc9baf4f3073809 a115fd5e51c77da1de5f2b8d4b6e3c321c7854ede14b437acc424486548e4204
POST /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 59
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:36 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/_plugin-vue_export-helper-c27b6911.js | 34.87.6.171 | 200 OK | 91 B |
URL GET www.kucoin-pol.vip/assets/_plugin-vue_export-helper-c27b6911.js IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
Hash25e3a5dcaf00fb2b1ba0c8ecea6d2560 7850b3fd4aeb69387bdb5a60025d15c41351d5eb cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/_plugin-vue_export-helper-c27b6911.js HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kucoin-pol.vip/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:21 GMT
content-type: application/javascript
content-length: 91
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
etag: "67e5af98-5b"
expires: Mon, 16 Jun 2025 22:50:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/kcs.png | 34.87.6.171 | 200 OK | 9.7 kB |
URL GET www.kucoin-pol.vip/images/kcs.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, interlaced Hashc7d1ac08436011ae1918535438f48470 4b98b45b2e3e263366c428a2ab9e4df281e4ea26 93d6cdc6c1a21b1126caa3930d4e3946352b8a57903e6a0b40f1396cc44cbd69
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/kcs.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Wed, 19 Mar 2025 06:40:14 GMT
vary: Accept-Encoding
etag: W/"67da66ce-25e7"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/bonous.png | 34.87.6.171 | 200 OK | 71 kB |
URL GET www.kucoin-pol.vip/images/bonous.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 1082 x 1371, 8-bit colormap, non-interlaced Hashe972a197b014876d07ee5e7c51a5c237 d958c8c94bfde432d528624742547da8ef8f9eaa f67da770d734ef8442e6827a2025413588a25a3488f286182cb3db01d10ae04a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/bonous.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Sun, 10 Nov 2024 22:39:48 GMT
vary: Accept-Encoding
etag: W/"67313634-116c8"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/phone.png | 34.87.6.171 | 200 OK | 109 kB |
URL GET www.kucoin-pol.vip/images/phone.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 1532 x 1346, 8-bit colormap, non-interlaced Size109 kB (108808 bytes) Hash5d5e3f6633557c605ab311ec6c3b0157 f4a7acdd412f2d85e4746347aadaa2f459b3edf2 fda4f2f461abcee73d0b273840d74888c9060e4c75e247a261652991d7cd779d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/phone.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Mon, 11 Nov 2024 21:04:56 GMT
vary: Accept-Encoding
etag: W/"67327178-1a908"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/brisk-web/1.1.6/media/ba61edcfc76c171abb5f.png | 54.240.174.28 | 200 OK | 5.2 kB |
URL GET assets.staticimg.com/brisk-web/1.1.6/media/ba61edcfc76c171abb5f.png IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typePNG image data, 360 x 360, 8-bit colormap, non-interlaced Hash310b6a2ecb8e22b90db788226cf7b21d cba0bd1682b4707aafb197eecac73eb57d939ef6 024490914d9c1a2773f8c1e01817252e80ae9704c2e1ec7551d38e6398b517c0
GET /brisk-web/1.1.6/media/ba61edcfc76c171abb5f.png HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 5177
date: Thu, 12 Jun 2025 19:10:09 GMT
last-modified: Mon, 04 Nov 2024 04:17:14 GMT
etag: "310b6a2ecb8e22b90db788226cf7b21d"
x-amz-server-side-encryption: AES256
cache-control: max-age=604800
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QJuWL0oOJAbNEILK8aojEmB8yfJg482_N5suqa1oHwCTwGM0k2-6Ng==
age: 315613
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/download-apk.8d918f9e.svg | 34.87.6.171 | 200 OK | 845 B |
URL GET www.kucoin-pol.vip/images/download-apk.8d918f9e.svg IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeSVG Scalable Vector Graphics image Hash2ecd47478b5ceaa40c7360bba4d8b6fa 83e9e824df2017c9e20ef883b99ff2139fcd3d38 7e478dec5e684bf5f51cbf040da54c401f92044693398340c18863a14633a9b2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/download-apk.8d918f9e.svg HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/svg+xml
content-length: 845
last-modified: Mon, 11 Nov 2024 21:29:58 GMT
etag: "67327756-34d"
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/BinancePlex-SemiBold-ab55edba.woff2 | 34.87.6.171 | 200 OK | 65 kB |
URL GET www.kucoin-pol.vip/assets/BinancePlex-SemiBold-ab55edba.woff2 IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeWeb Open Font Format (Version 2), CFF, length 65388, version 1.65 Hash79f1664a98a57edf9e77011d52d3ff33 d98ddf6c566e54425c11d70f117edc1fce31a3c2 ab55edbaaef0358cc623836d1522fa0f4a1b164e5ad876122bfde83372754d1d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/BinancePlex-SemiBold-ab55edba.woff2 HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/assets/index-d468abc5.css
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: font/woff2
content-length: 65388
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
etag: "67e5af98-ff6c"
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=quotes | 34.87.6.171 | 200 OK | 329 B |
URL POST zq.goingogo.com/api/index/ajax?action=quotes IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash47c024ddec9bcdf489394c08442a8712 4f6d46cf65f6d256ac40646c588d7d81ddf301ad f6f4e68f05177ade82c2578302626774f0d9e4b9f00d6f74dc74ed13d988ee3a
POST /api/index/ajax?action=quotes HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 27
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/brisk-web/1.1.6/media/b0f23c8dcf9a7e2f657a.png | 54.240.174.28 | 200 OK | 5.3 kB |
URL GET assets.staticimg.com/brisk-web/1.1.6/media/b0f23c8dcf9a7e2f657a.png IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typePNG image data, 360 x 360, 8-bit colormap, non-interlaced Hashabee68ec515f881f97e44ddffa087fe8 0f8c6c6970a59b7f15202b1378e43ab796372a7d 3be2e6ed777af7b76516fa31e717079f616855ce1c0e5d750b035ae063afe0e3
GET /brisk-web/1.1.6/media/b0f23c8dcf9a7e2f657a.png HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 5331
date: Thu, 12 Jun 2025 19:10:09 GMT
last-modified: Mon, 04 Nov 2024 04:17:14 GMT
etag: "abee68ec515f881f97e44ddffa087fe8"
x-amz-server-side-encryption: AES256
cache-control: max-age=604800
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Lzc3DTr2veb8nt-gj_PUN9EMmpXkb6lkZ5qKYvKiYVQhg9oxUJtvOQ==
age: 315613
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/download-gp.9a4209bc.svg | 34.87.6.171 | 200 OK | 691 B |
URL GET www.kucoin-pol.vip/images/download-gp.9a4209bc.svg IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeSVG Scalable Vector Graphics image Hashe56adba95d5d38f4ddbc096ca1de2f25 9444998d41a68d125963f072273ec570effe7322 5b6c3cdd34bca3baa0cbc4506934ace6db353562d5a39f3bc619bae7c40fa62f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/download-gp.9a4209bc.svg HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/svg+xml
content-length: 691
last-modified: Mon, 11 Nov 2024 21:29:42 GMT
etag: "67327746-2b3"
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/cms/media/10Od6t5ammiCVnd52DCYyCtGArkgA80rBTysVPcxi.svg | 54.240.174.28 | 200 OK | 547 B |
URL GET assets.staticimg.com/cms/media/10Od6t5ammiCVnd52DCYyCtGArkgA80rBTysVPcxi.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash3da8e52869c54ea6f8663447466d8be2 9834dfbc111dd0888b51a996a105ae2a008aac53 8034e63ba92e81259069bc86032277db637b758ffeeae7482177d835b38da987
GET /cms/media/10Od6t5ammiCVnd52DCYyCtGArkgA80rBTysVPcxi.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 547
last-modified: Wed, 06 Sep 2023 02:44:00 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 12 Jun 2025 03:56:40 GMT
cache-control: max-age=604800
etag: "3da8e52869c54ea6f8663447466d8be2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OojyugI8UTCaIF4OXxwG8e7i0VWoe3rrRUgB-vtpUg9a9DUwVOXFqA==
age: 370423
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:37 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/assets/BinancePlex-Regular-fb333dfc.woff2 | 34.87.6.171 | 200 OK | 61 kB |
URL GET www.kucoin-pol.vip/assets/BinancePlex-Regular-fb333dfc.woff2 IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeWeb Open Font Format (Version 2), CFF, length 60688, version 1.65 Hash89cfd33291492538ba8f65a3ee908b93 5a71a4ed8bd95628562fd26c2a304ceb11e06c83 fb333dfc868c8c5af243500d6f727f8ed0005110e6bfef678b09854d467d8006
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /assets/BinancePlex-Regular-fb333dfc.woff2 HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/assets/index-d468abc5.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:21 GMT
content-type: font/woff2
content-length: 60688
last-modified: Thu, 27 Mar 2025 20:05:44 GMT
etag: "67e5af98-ed10"
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/ETH.png | 34.87.6.171 | 200 OK | 11 kB |
URL GET www.kucoin-pol.vip/images/ETH.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, interlaced Hash5892953997141c5a49f7de53d17b516b a28b0d2e19b080e0139dae1eb5afe38e573b5747 7f5e24524c2f29ae900df318ce9596f72d0ee637415799b0a92fb5b6094cd956
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/ETH.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Wed, 19 Mar 2025 06:39:28 GMT
vary: Accept-Encoding
etag: W/"67da66a0-29db"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/xianhuo.png | 34.87.6.171 | 200 OK | 4.1 kB |
URL GET www.kucoin-pol.vip/images/xianhuo.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 432 x 324, 8-bit colormap, non-interlaced Hashd4ced7034fe70e496e067f4b1527af9c 5f2c0ead1c4be2f6c6c241eacb762ba427e030ed 277c04307bbfa4e1112b21b3adf2f2f4081168851cc373aaff2c88d13d2516f0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/xianhuo.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Sun, 10 Nov 2024 23:13:44 GMT
vary: Accept-Encoding
etag: W/"67313e28-fe4"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/pingtai.png | 34.87.6.171 | 200 OK | 5.2 kB |
URL GET www.kucoin-pol.vip/images/pingtai.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 360 x 360, 8-bit colormap, non-interlaced Hash310b6a2ecb8e22b90db788226cf7b21d cba0bd1682b4707aafb197eecac73eb57d939ef6 024490914d9c1a2773f8c1e01817252e80ae9704c2e1ec7551d38e6398b517c0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/pingtai.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Sun, 10 Nov 2024 23:43:28 GMT
vary: Accept-Encoding
etag: W/"67314520-1439"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/d5deb39b98d1eacb.svg | 34.87.6.171 | 200 OK | 504 B |
URL GET www.kucoin-pol.vip/images/d5deb39b98d1eacb.svg IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typeSVG Scalable Vector Graphics image Hash7a99d6e70a0e4beadbdcbfea1f48e9c6 d5deb39b98d1eacb409838111115ced23a1cf745 82196b9ad1d273efa6c691238f76350238509e67ff6e2e71a3fe139f9e1f115e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/d5deb39b98d1eacb.svg HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/assets/Homes-eae8978c.css
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: image/svg+xml
content-length: 504
last-modified: Mon, 11 Nov 2024 22:36:20 GMT
etag: "673286e4-1f8"
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 183 B |
URL POST zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash126ef69d936ea9f10c355db7ccb33ce3 cd3331f60b8d6f75ec15ad9ac5924cfcc83f2b94 b6e8491fcfcff2ab8c9c8b5feca4685612ab6cef85a165f6281dc14381951422
POST /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 59
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:27 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 183 B |
URL POST zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash78a3fdc1ea2df0bc55f3e85ef7981b47 d58a293fb04f0d5885cc7fec2a7564aa13cd4e8d 64dbf1e16f2a610066d4b003ae9c0c13eaa86f0c6610dab9db9688e46aa04270
POST /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 59
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:31 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 183 B |
URL POST zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash951ee56b76581347e16c808ddb2dbb37 fb1f33ef075cbb4ddb88bdbe16e1971e014f7978 8cf5ca9626bfc8bd1bd1a8ead3de83b67ffa6f904fa37043bcb3c4304dcbc1e4
POST /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 59
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:34 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=quotes | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=quotes IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=quotes HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:23 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/chanpin.png | 34.87.6.171 | 200 OK | 3.4 kB |
URL GET www.kucoin-pol.vip/images/chanpin.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 432 x 324, 8-bit colormap, non-interlaced Hash830f3e045d2d1c4f8a1a221560db982c 744bcaaa73f2473118fc18e1a09a1835822475ac 19102d8d87b056ed4f8df36de46a976ab73e4a1c2bf78c18c59f62fed438d255
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/chanpin.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Sun, 10 Nov 2024 23:14:00 GMT
vary: Accept-Encoding
etag: W/"67313e38-d5f"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.kucoin-pol.vip/images/touming.png | 34.87.6.171 | 200 OK | 6.9 kB |
URL GET www.kucoin-pol.vip/images/touming.png IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectgoingogo.com FingerprintC9:7E:43:92:54:23:D1:CF:5E:C8:7B:E6:B3:A9:FC:57:0F:13:D2:AD ValiditySun, 15 Jun 2025 13:51:24 GMT - Sat, 13 Sep 2025 13:51:23 GMT
File typePNG image data, 360 x 360, 8-bit colormap, non-interlaced Hash1b75d0dc543ad5e8ed1acce531fdbdd9 84f525f9145d15d012d5d8ad70c25cf20e93a1c1 02b1a2ecbd4dd329f070a1fa01926c82ab56cf2aec5adc4598d776a66aff1929
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/touming.png HTTP/1.1
Host: www.kucoin-pol.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Cookie: token=OIubxgdsKzeHKTh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:22 GMT
content-type: image/png
last-modified: Sun, 10 Nov 2024 23:43:42 GMT
vary: Accept-Encoding
etag: W/"6731452e-1ad0"
expires: Wed, 16 Jul 2025 10:50:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/brisk-web/1.1.6/media/387107bcec6483b7b805.png | 54.240.174.28 | 200 OK | 6.9 kB |
URL GET assets.staticimg.com/brisk-web/1.1.6/media/387107bcec6483b7b805.png IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typePNG image data, 360 x 360, 8-bit colormap, non-interlaced Hash1b75d0dc543ad5e8ed1acce531fdbdd9 84f525f9145d15d012d5d8ad70c25cf20e93a1c1 02b1a2ecbd4dd329f070a1fa01926c82ab56cf2aec5adc4598d776a66aff1929
GET /brisk-web/1.1.6/media/387107bcec6483b7b805.png HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 6864
date: Thu, 12 Jun 2025 19:10:09 GMT
last-modified: Mon, 04 Nov 2024 04:17:14 GMT
etag: "1b75d0dc543ad5e8ed1acce531fdbdd9"
x-amz-server-side-encryption: AES256
cache-control: max-age=604800
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oASb_PtSNAy28fF8HVc6AQcHT83gUr4wqJZDGm4F-FOW4T4zGwuyNQ==
age: 315613
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/cms/media/3F1Ut1EOpvsH7rYgY6BkpyVk8aAJTlTv3chIWPeQH.svg | 54.240.174.28 | 200 OK | 1.6 kB |
URL GET assets.staticimg.com/cms/media/3F1Ut1EOpvsH7rYgY6BkpyVk8aAJTlTv3chIWPeQH.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash09b808e36fe3e714b1692258f70a12d7 96836fcb67cd19236a44a05198396e76ca83646d 4455dc7c6d496315262b687a0d43b06d5d479d69716c8f624b9acafd633166df
GET /cms/media/3F1Ut1EOpvsH7rYgY6BkpyVk8aAJTlTv3chIWPeQH.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Tue, 14 May 2024 10:37:22 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Tue, 10 Jun 2025 22:50:23 GMT
cache-control: max-age=604800
etag: W/"09b808e36fe3e714b1692258f70a12d7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2_9WmpSTe7Z29eU4gTOTgqj9rB5DDjQ29C0sywirLUMyS-JtBi-Feg==
age: 475200
X-Firefox-Spdy: h2
|
|
| GET assets.staticimg.com/cms/media/5GeiTSs0zapCEumOfTVLrHO0zV3pu4CcIl9lJ3NEm.svg | 54.240.174.28 | 200 OK | 2.6 kB |
URL GET assets.staticimg.com/cms/media/5GeiTSs0zapCEumOfTVLrHO0zV3pu4CcIl9lJ3NEm.svg IP54.240.174.28:443
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerAmazon Subject*.kucoin.com Fingerprint48:64:AC:0E:79:B4:90:02:C4:85:A4:04:74:FE:7B:11:57:3D:3F:AB ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash12c86d4ef22cd8abebcf2356b9621e33 62c13a5723bfa51b6b45784fd6b121d0237edd93 0776cbd7f15375ceceb3725a3ba006ab872fcac890ffabebdbf7b22d095b06b2
GET /cms/media/5GeiTSs0zapCEumOfTVLrHO0zV3pu4CcIl9lJ3NEm.svg HTTP/1.1
Host: assets.staticimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 26 Mar 2025 20:31:04 GMT
last-modified: Sat, 25 Mar 2023 10:02:25 GMT
etag: W/"12c86d4ef22cd8abebcf2356b9621e33"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xYaxdR3dGuuYLDwRJs4NtNKWi6YzY7Ck4M84lmC8skhmDuuSBZmkIQ==
age: 7049958
X-Firefox-Spdy: h2
|
|
| POST zq.goingogo.com/api/index/ajax?action=getStatus | 34.87.6.171 | 200 OK | 183 B |
URL POST zq.goingogo.com/api/index/ajax?action=getStatus IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
Hash38eae55a1464f274b4a374b6c15b3e42 dd2cb791f0cf764c903f14c0e5426604876dfc36 5be238ee1191d7746a2e72b1df1c3a30233c47da317ee7d9e5a361b83a462ef0
POST /api/index/ajax?action=getStatus HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 59
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Referer: https://www.kucoin-pol.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:28 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| OPTIONS zq.goingogo.com/api/index/ajax?action=ping | 34.87.6.171 | 200 OK | 2 B |
URL OPTIONS zq.goingogo.com/api/index/ajax?action=ping IP34.87.6.171:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.kucoin-pol.vip/ CertificateIssuerLet's Encrypt Subjectzq.goingogo.com Fingerprint0D:A5:7E:71:A3:6F:40:81:12:FA:6E:44:C4:98:CD:1E:AA:D7:FE:B7 ValidityFri, 13 Jun 2025 11:11:22 GMT - Thu, 11 Sep 2025 11:11:21 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
OPTIONS /api/index/ajax?action=ping HTTP/1.1
Host: zq.goingogo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.kucoin-pol.vip/
Origin: https://www.kucoin-pol.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jun 2025 10:50:31 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: x-requested-with,content-type,token
strict-transport-security: max-age=31536000
alt-svc: quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|